index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","efb688214c3fe5d9273ec03641cf17af5f546b11c97a965a49f8e617278ac700","f64211b0a49589bb53523dfb88eb9937ab88c8fcea98e2aabcbee90f1828e94e","11b0e9673bbeb978aa9b95bcad43eb21bbe0bbaaf7e5a0e20d48b93d60204406","eda603f4d469d017917f5d6affeb992fdf3b7971e49868ece8c38fb8e6f8b444","c4529a061f205aaee46c219123d15059d2161df2bd7c7b738dd2a2c1ffd8d3ee","170fa5d29cdb562d41a054abf2a57ca29fc233805b59692a1a57ebf25449be7c","f29b948905449f330d2e5070d767d0dac4837d0b566eee28282dc78749083684","197f4933680a611ad2234a22769bd079885f81956221ec0de172d5a19eab648e","1017fcf607a329bb6ad046181c3656b686906a0767fff2a4a3c6c569c2a70a85","761b78ddab55b4e561607ce5ce9d424a7aec4f1994aad988f0612b096cdd1d6d","097d8edb1762d7d3ded4360a9f5b4673a898937421f36853d2f5cde77e1bac93","4a06231957c53dee1a11ff3eb84caad082f18761aee49e72d79c7f1d32884e34")
