index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6","2ecc2a48fa4eadb80367f69799277c54a0fe6dd2220a6a2dd7b81cfba328ed19","ed180371dfec2186148bbcab99102ce45fb1fcc3764b384c2abcaceba2fa65b6","719900e330cecd87250ac1f6c31f2d6f42f226294fb011cf47c442f8d2b7455b","3ccb809cd97cc08ff380600dcaa5244ef2abd7afd9e7a9f2df7c4e28fee637f0","e167804a6f36dc99e96909bcededa8a733dd8633037b8b52e8d7881d20446c16","bd9b8fe173935ad51f14abc16ed6a5bf6ee92ec4f45fd2ae1154dd2f727fb245","57fcbb058fc0dfe0cce29676569f2e30d1f8a59345ab161d8183d0769428f4e2","4900d1e66cef8507b265c0eec3ff94cb5f774847d969e044dc8ccd72334181f5","2dcfcaaf3ccd8e06043e651cd5b761ae50f3463c6420d067b661969e0500dce2","52f6fce27184b61ceb3c02d360e04dc1489c4136a0ffcbb39c50d27474e4283b","ccbefa930edc4d5b5b34a5dea16c73c9d3f3b4167406c3ae841bc71fce45c68e","cd105196cbf17f11dbff2b623f5bfaf9ef8d91f2598fe3bc2a7da192c2cee457","9535c3f02ee8a47ad1392f36a1ff44a3d5cb067ecef748e63e1628bc489c9d90","ca2b7c0f2a2a42ce586d63ccfcf131f8b99d73521742cc15d6255e76f9278fbc","d5f4292d4f5661ce12dd8384cfbb22a3d17908290ba80d9de3a1697064d248a7")
