index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("570ed43779983319e9ac923942876c1840989ec1b7be0c7eb5e23b6c30215ce4","a28ac1da62f43d85ec4c11feede295f68d51ed6347e5f75982231f61377d64e9","6a3eda34a5c49000ae8285bc394cb86b75310d7f31cc5c8f81c1f5070d99841a","ad19f8621b5665218b6e4f6c43cabe8be69d7d8cf2ea9494e8ead66042389e78","5686abbf460ab0803f7cd1b710c603958277794913962b7178304853c51fe29b","3813e2742e946098022b8449da4c26b500a8dd89094e9d1a5328fdadca8cdc55","343cc53728f09e96d9801329928ee567d0c0a77a3e0462f7b2af57c6ade1043c","313801adc07e6038ce7497f5895a9fdeb0fd9bb9140ac277dcae79f9c74df0a5","d48ddac049737980048de4a23aa42a0080d3a5316d1b88f4dd96ffcb24a04249\n8a20c203990d316ab4079e48a36dd35abe224884f26723319a1a9317b62a6f39","0f4273b4f5c0ae5f8809d95a661fe193daafc44de404ffdc5710a49191069779","ad2ae8e757ea6c04b2e766b2234f7b90","747a43c82c4a13158da7adc6634bae72b5b7aafcd9214cbd2694bf5d60999369","b400141ab2d20d1c4377dbcb913af48a0c7c557ed1edb1daac167458614a2ace","a96e676d01a3eb08ff8fb7d240eaab359940a146e004a1a306524e4fab2fcc3c","bd0cc57df9ee2842d2b25b7bda4af6ad557d741dc156fadef2fadd95b79a85a2","895b79e57fe803e1149ed7f9c15c8245d3ebca91337ba7f80dac2a77c7c74e2b","5b18e73db621378b74b672268fb8f149a3e0cf3615033c0ad1cac19d35441f20","1f3db766a210d61eb043a2f45cde3d11227345ec1659df31a9b9aae03b7ae44c","b018f0cec214daecadb7d3059c53d8cd215098d8c9d3129b070faba4cf3e484d","b477a89e46fb27926f6c5a15df2d3342b7f08ba51c0300a833ec9339d6e81349")
