index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ca15f68eb58e61313dda1d34c4d20f1582b8506481436c1bfd5c354922ddf7e0","84e281b7755da1f89e3ed2b109556002c40547292deed3f7a7754707c69396fd","9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854","d3b3627a34b3738327449653acfc5509be290722648fd1f55ee09bd0a6ff941f","37663652d075edfbbd48085c787ba12bc95b6492863d21f334850d78e203b12b","97ef6f319bf880412459655f70a32801241e551c6cf51c85ceb9f39eb86054e6","f5c16248418a4f1fd8dff438b26b8da7f587b77db9e180a82493bae140893687","6e3661049bde832369781afa1d9034315442b1e4b87aa92d571cbe73186997c5","84197619db6a80282ae8d96e40e107de9596a020cd9397f780c07fab3c4576d7","2c87388d5f2eba48cd479c05c837a5e4a661927fc0ade00b986489a449ad0e3c","f2b8c976c683e0e00377b393a817ff5aae6ead4751e984767a477c60045cf135","effc431f13997a896d07082c4c018a77feee075097fd80de167c20c7515d1516","f39deb0e0acbd4738ece9a5e0075a580cb7be6090b070fa2b3299a13effd833d","38efd88227ca093b3b1d9b10de3ba3e6f27a4b837155741cc776b1212e0f70b1")
