index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("636e04f0618dd578d107f440b1cf6c910502d160130adae5e415b2dd2b36abcb","70a5492db39585ec18de512058a5389c9a4043fba13ca8ad7d057ead66298626","69cb709bffbeccea60776c49935acb41ecfb160973f1f11b195007c254c1c28c","8c07c37ac84d4c6fd76de3d966e26b65e401bc641a845baf6f73ad0d6a10fc6b","44b1f3f06607cd3ee16517d31b30208910ce678cb69ba7a0514546dff183dfce","cf8e09f013fcb5f34c8c274bf07d9047956ba441dabf2d3de87ea025e14058b7","2866763ebd3124bfe9cf3f65d6341dda6bbb98e2653c98dd2f001f152e082291","08ced2cca0b22dd7a211ebf318b8186fc1c2149943338c77ee2ac677b473727f","79d1c7158d374ed80ec7f9305f6638ad95aefd600c9e280fc7fe081c7ef2f4b4","e9a19d42da93e9257dc9b89afc34341e1c13d6a6f7dacd309f2fc545e6b749a3","8140326d7474722e6bdd51dd305609e82319c0150ed429b74587d689acea2d54","ba6301e35fc3feb41ece82e518f97a81263aa3bd750de7a84eef01dbf15f3507","c2cf27810cc11ed7c6ae9f70f156f18cf3f73550ab5d675278e3b725fc88e2b0","e03b8c54ac916b363f956e4e4e04a19eb4119455d8006c92e9328e16a8cee52f","8fe4e336fbac4f5227f802ba1853f1b07ffdb414cec961c532c115078a2aa55e","8eb178d5b1d528380c9ccfe1ea7f43aebd97b018a5b449ec911a05c0bd52d207","6865685f75a64780aa24a05b267bea128bcc6efdc682fa2893e13a4f63e6d6e7","47e83dfd0f9680d2e9623fee92c0acc4db40ea4272edeb53164304620305a24f")
