index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("762bb8a7209da29afb89f7941ae1c00a04cf45a144c6c5dddcfa78ff0d941539","86e4e23f9686b129bfb2f452acb16a4c0fda73cf2bf5e93751dcf58860c6598c","f706bae95a232402488d17016ecc11ebe24a8b6cb9f10ad0fa5cbac0f174d2e7","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","f71476f9adec70acc47a911a0cd1d6fea1f85469aa16f5873dd3ffd5146ccd6b","a8a7fdbbc688029c0d97bf836da9ece926a85e78986d0e1ebd9b3467b3a72258","5ef9844903e8d596ac03cc000b69bbbe45249eea02d9678b38c07f49e4c1ec46","f81bd2ac937ed9e254e8b3b003cc35e010800cbbce4d760f5013ff911f01d4f9","367d47ad48822caeedf73ce9f26a3a92db6f9f2eb18ee6d650806959b6d7d0a2","6f95f7f53b3b6537aeb7c5f0025dbca5e88e6131b7453cfb4ee4d1f11eeaebfc","1409e010675bf4a40db0a845b60db3aae5b302834e80adeec884aebc55eccbf7")
