index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("81c08366ea7fc0f933f368b120104384","723f80d1843315717bc56e9e58e89be5","7822e53536c1cf86c3e44e31e77bd088","324688238c42d7190a2b50303cbc6a3c","a635bd019674b25038cd8f02e15eebd2","beeaca6a34fb05e73a6d8b7d2b8c2ee3","d5d48f044ff16ef6a4d5bde060ed5cee","d77c8449f1efc4bfb9ebff496442bbbc","2f431c4e65af9908d2182c6a093bf262","7cc8ce5374ff9eacd38491b75cbedf89","8f339a09f0d0202cfaffbd38469490ec","46ca088d5c052738d42bbd6231cc0ed5")
