index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("ed9b24a77a74cd34c96b30f8de794fe85eb1d9f188f516bd7d6020cc81a86728","204544fc8a8cac64bb07825a7bd58c54cb3e605707e2d72206ac23a1657bfe1e","01f12bb3f4359fae1138a194237914f4fcdbf9e472804e428a765ad820f399be","4c78d6bba282aaff0eab749cfa8a28e432f7cbf9c61dec8de8f4800fd27e0314","413c9e2963b8cca256d3960285854614e2f2e78dba023713b3dd67af369d5d08","b683235791e3106971269259026e05fdc2a4008f703ff2a4d32642877e57429a","e3e3f7d9abb9696904684d8e32f36818e1939c8122dcc73299a1b7f6b6b700b2","4d4304d7ad1a8d0dacb300739d4dcaade299b28f8be3f171628a7358720ca6c5","a9324a1fa529e5c115232cbbc60330d37cef5c20860bafc63b11e14d1e75697c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","47262571a87e70238bd6afd376560e9cfdc94bfacae72f36b6aa9fb6e769eb9c","da53c49641b05e00cde09d47260da927ec403f01ac388605b785eac98306f9c2")
