index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("7539bd88d9bb42d280673b573fc0f5783f32db559c564b95ae33d720d9034f5a","ea9f0bd64a3ef44fe80ce1a25c387b562a6b87c4d202f24953c3d9204386cf00","02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292","36e5be9ed3ec960b40b5a9b07ba8e15d4d24ca6cd51607df21ac08cda55a5a8e","34e479181419efd0c00266bef0210f267beaa92116e18f33854ca420f65e2087","8f59b4f0f53031c555ef7b2738d3a94ed73568504e6c07aa1f3fa3f1fd786de7","2f3e5fda95863e6eef32a2cdd73f9f7b0e1fbdaae58ecef1acd30982b7c2229b","9de29740a3e646bce212da3a71b0ccf4effbd798a314e88168114f1993212f4a","104b22a45e4166a5473c9db924394e1fe681ef374970ed112edd089c4c8b83f2","595cd80f8c84bc443eff619add01b86b8839097621cdd148f30e7e2214f2c8cb","7114288232e469ff368418005049cf9653fe5c1cdcfcd63d668c558b0a3470f2","e654ef69635ab6a2c569b3f8059b06aee4bce937afb275ad4ec77c0e4a712f23","2f3d82f7f8bd9ff2f145f9927be1ab16f8d7d61400083930e36b6b9ac5bbe2ad","fb9f9734d7966d6bc15cce5150abb63aadd4223924800f0b90dc07a311fb0a7e","f1a6e08a5fd013f96facc4bb0d8dfb6940683f5bdfc161bd3a1de8189dea26d3","a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2")
