index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0dd4e8e7d52d991a91fe92b18985aa8a","91303874b8a51ac4da1d9da6ebb3d0ef","aa5da5d211dd6b3c5e9404520ebeec1f","3a52e34c074990eee6ed67e3237c4c9c","fd87b46407dcd7e3dfa77dcd37573100","56819905506b605b88d2e6513c91bc25","1b27e622f4edbbdd8fc93a0d1c129607","35dea5908c411c55232760a766992b4d","01d7838a7a970a4fca588740cf6f8129f4ae01b0d9936eb43a1aff9436b848a2","653798b0c7226a4189bded9afaae0f0c540216c2acda512c809a61008e4ae169","1b586bfe3423ef03ecba497e90fd31b42022dd8e1f325e212c1e23cc58ba7be7","a451e748bc1e4c05bdaa722b35a5f6dd1a78765ac8967187a61b846f819c8bf6","76f06975c4f0772d68e2a30d8e0c62b1f8c484e2ce7b0979c63c4cf519a40b61","4e85fc6b1d7119195b46633bd051c65074eebf181d8f9cd142ecc0e7a9bcc3b8","164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f","4833f6e7b2beb3821ccd544a936f3d6db6403ee58c05038f15f2d1544f2acd3c","4a14138403945ca46d0389b8ff0870e0a7668394","f41ed21d3a37069355b5c84222bea6f6b68d64bf","037e6d5fa8398a3f95df469d60debe6fc8c93f89","b7df84535c4d8002cdd7675866617cf9884455c6","3bd0a9a9c262ab4fb7fc9a9debcf36fd882f59cc","f64b5b5cdb72eabd3ba9ddcd3fbfa2a7211caa6c","3e7b42dd10c01f632f158cc96701f6ba49ebec48","803e87e294445707b2480e0f6eeb21990be7522e")
