index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0073414c5a03b20f6f255f400291de67f2a7268c461f90ea6ff0355ca31af07a","2020cae5115b6980d6423d59492b99e6aaa945a2230b7379c2f8ae3f54e1efd5","4175dae9b268fe5b4f96055ea0376417b5ddc2518d3bd11e20f0f8255bb4621e","4d7da1654f9047b6c6a9d32564a66684407ed587cbaffa54ec1185fd73293d3e","5300d7456183c470a40267da9cd1771d6147445b203d8eb02437348bf3169e0d","53f5c2f70374696ff12adcaaf1bbbe0e5dd1b1995d98f2e876b0671888b43128","62205bf0a23e56524f2f1c44897f809457ad26bc70810008ec5486e17c7e64e2","68bce3a400721d758560273ae024f61603b8a4986440a8ec9e28305d7e6d02b0","68ff9855262b7a9c27e349c5e3bf68b2fc9f9ca32a9d2b844f2265dccd2bc0d8","73c19eab8d2ae58db3968dd7de0e745db2d7709859305b113b748bb02494465e","831a2409d45d0c7f15b7f31eddbbdfe7d58414499e81b3da7d9fdee28fafe646","8dd64ea7f226d3eb1e857b0086c0668542652cb37f8142dc000272dbd9569e31","91c515d55fae6d21b106c8c55067ce53d42bef256bd5a385cadd104cf68f64ff","9d346518330eeefbf288aeca7b2b6243bc158415c7fee3f2c19694f0e5f7d51c","10d2b5f7d8966d5baeb06971dd154dc378496f4e5faf6d33e4861cd7a26c91d7","21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da","46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561","c34c5dd4a58048d7fd164e500c014d16befa956c0bce7cae559081d57f63a243")
