index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0e5470a33fd87b813ecf72370f9e1f491515c12f41c8ea3c7bbc169ac56acda5","476171dd2eb7f118d3e0aff32b7264d261ba4c2d9fa6c14ccff6d8d99b383db4","a663c9ecf8f488d6e07b892165ae0a3712b0e91f","32583272b5b5bd95e770661438b41daf","60a14fe18925243851e7b89859065c24","a30bcd0198276e8e28e0e98fa4214e8b","1a0f4cc0513f1b56fef01c815410c6ea","bdef67c31299a3d0c10e3608c7ee2bdb","244000e9d84abb5e0c78a2e01b36ddad8958d943","6523d31662b71a65533b11da299240f0e8c1ff2c","86be2a34eacbc0806dbd61d41b9d83a65aef69c5","e4d20697bfe77f4b3e1655906ec61c5b12789f87","e35421e937dc29379780972f64542c05","d483d48c15f797c92c89d2eafcc9fc7cbe0c02cabe1d9130bb9069e8c897c94c","6cdee30ba3189df070b6a11a2f80e848a28510ceeec37860705763e9d00620e4","d1856c1533c8ca58bae47a5f354f083a118ff9b36453e06e12c1395bca2c081e","ec3023ecf592a4f637e7c99b009466aa38ba90b9f9c7fbb550f129bca285bd6e","cc9c1f2089f73382fa79f6dfbbadbc19bbd39c925659dea814408f774635495b")
