index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c0063d24f3de4e7b89abf9b690a3d264efc6ab7a626f73ad9f42d6bffe52bce7","fef79160f0ce9aa9dec15c914f2c2b40b2ae1ec2b0e65e414545dbc994afd73d","3434271f2038afaddad4caad8000e390b3573b2b53e02841653a4ee0dfd73674","0ac0b3758359855e96367b6c83b0aabdc6cfb59b4caa1cec48632defd21cdf3c","451cef0085dc5b474cc5c68af079d0367d7d2ec73ae2210788beb5297e1fbd6d","e710e902507ad63e1d2ce1220212b1a751b70504259457234103bb22845a9424","2718dcbb503b6334078daf4af61e17a547fb80c9b811c26cfc9d32f5ce63a826","abf937fb2f162d1dbbe76c7386c9892db5191e17de586f0a5c49819cd68b5e0f","bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4","572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b","094d1476331d6f693f1d546b53f1c1a42863e6cde014e2ed655f3cbe63e5ecde","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691","bb48f5c915ab7bbbbbf092a20169aaf3ced46b492ed69550854a55254ce10572","e263b9d5467bf724000966da2acfe06520a464c566e4b3d9833213f850f3f1f2","ac49c114ef137cc198786ad8daefa9cfcc01f0c0a827b0e2b927a7edd0fca8b0","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f","cdd7814074872fc35d18740cdd4e8a5fefcfd6b457fde2920383fd5b11903fc5","a61b71ee73ea8c0f332591e361adeda04705c65b5f4d549066677ec4e71212f7","56e8bd8b0c5bfb87956f7915bc47a9ecf5d338b804cee1dccacf53400d602be3")
