index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("ccac0311b3e3674282d87db9fb8a151c7b11405662159a46dda71039f2200a67","666944b19c707afaa05453909d395f979a267b28ff43d90d143cd36f6b74b53e","7cd1fd7f526d4f85771e3b44f5be064b24fbb1e304148bbac72f95114a13d8c5","0e83e8bfa61400e2b544190400152a54d3544bf31cfec9dda21954a79cf581e9","d221bf1318b8c768a6d824e79c9e87b488c1ae632b33848b638e6b2d4c76182b","69e9c41b5ef6c33b5caff67ffd3ad0ddd01a799f7cde2b182df3326417dfb78e","6237f91240abdbe610a8201c9d55a565aabd2419ecbeb3cd4fe387982369f4ae","b36aac2ea25afd2010d987de524f9fc096bd3e1b723d615a2d85d20c52d2a711","912ef177e319b5010a709a1c7143f854e5d1220d176bc130c5564f5efe8145ed","ba72e8024c90aeffbd56cdf2ab9033a323b63c83bd5df19268978cded466214e","e7bcd70f0ee4a093461cfb964955200b409dfffd3494b692d54618d277cb309e","399d3e0771b939065c980a5e680eec6912929b64179bf4c36cefb81d77a652da")
