index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1","039e1765de1cdec65ad5e49266ab794f8e5642adb0bdeb78d8c0b77e8b34ae09","91ad089f5259845141dfb10145271553aa711a2b","dc90560d7198bf824b65ba2cfbe403d84d38113f41a1aa2f37f8d827fd9e0ceb","6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0","2e52494e776be6433c89d5853f02b536f7da56e94bbe86ae4cc782f85bed2c4b","1cbbf108f44c8f4babde546d26425ca5340dccf878d306b90eb0fbec2f83ab51","ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4","8f3db63f70fad912a3d5994e80ad9a6d1db6c38d119b38bc04890dfba4c4a2b2","0d6c3de5aebbbe85939d7588150edf7b7bdc712fceb6a83d79e65b6f79bfc2ef","984ce69083f2865ce90b48569291982e786980aeef83345953276adfcbbeece8","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","7594bf1d87d35b489545e283ef1785bb2e04637cc1ff1aca9b666dde70528e2b","f3a1576837ed56bcf79ff486aadf36e78d624853e9409ec1823a6f46fd0143ea","95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7")
