index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","6c5a4a8b7554000d5ab5221c43f25f093ba6a37c6b2511335e002f333c5af6c4","bf803adb5695fce143062e6f51980d46537167b7a9e0e85ad13a999e35bd0466","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","62e7d750df3bb49f9535e8b4ba91d5ba8f5c655a0027643b52a3d9ffb0b64208","af23af4d4b3ba82c76a50bb631b4aca8d98e9a1560000d5c6fce39977cb9d362","84910fcdcb2edb3feeb3307bee0e6b33fc91caf8de344a3be71452b04b4595f0","6cbe9be190f521408438262d0c7f2ccbfab32a6df558cec2a264285fdfffe5c2","53af2c266c7f18e7c1ab16460d3c09d773fe93ac0a840fa83a30cc1020d1019a","4f1c1565afc782e688945c07a486205c59d43a98ae577c5d065bfed9a47a983d","b5d8caa15cbf53d002edc6194abd0de43e4a139cc04f9703ae7bfc397bca66c8","9bacf20a00f73124039c4476d600e70293ae60d1d1d28290a63000b510f313f0","43328f774db70b98c4cbe83cc3be18de20a29b073b483eec49c64c6c301e4079","1b5f1e505e57b9915418f251f9c2343302f0737bdd85126666db56a27f0142f2","b83e50fa2c5c54e027f3bfe859e2a69e883bbb0080fed20aca176f77ad120fa1")
