index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("87db5cbd76e7adeb6932c4ae14f3d3bb736d631460d65e067fb2a0083b675399","d9e2b6341f6de5c95dd02cf3350c07cd2be3b0a78b82c073229396b6d4c8d3c1","3ce5ab897b7f33bc1b9036abc8e7d2812b385fbab404dad686afaf9fb83fe07a","48b9f78899b8a3daaeb9cbf7245350a6222cbf0468cd5c2bab954c8dbbce3995","7157be86c6612c59e5120ae00260f4268b19560fa5a6fa52ed54d72868070d50","432974205e1ce4c1d2c0e6bf6ebfafd90f6c19451eec0485ac46beaf65247763","1e0c5129ac74989754b7c27be9e12b1ebf90fa5f81db6d7fe5f1aa050a914cf9","3a52c13d00af0486095ee4007fd72dae646d3c7384754744507e33537b3fdf2a","8c075d89eee37a58f1f3a8bf0cbd97e0c8f00e73179a36eb2cd8745024c1c4ee","2cd715d0702fd70fda45c0569a38b3d983de1a8cf23b559293a7c0623da69c90","ba6902efd3771a564785bdae68fa5f5ac12b7ebd828e8975459fff0136e2efdb")
