index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("3c47d45f09948b8e6fdb5f96523bc60b","af9327d353b97fd50a777145bc0e8e1e","a38dece5bcb9f6d1c027d86e0318a60e","227fa5d690a943114ff3ccfe7977192a","7d0f67343f128d29a50ccd3639b72884","22f9682e543b94532d46541c63512f2d","7e09279dcd3655ab1b2e2684746e4bc2","ddab66730a84583b98d3415f9181d092","b2e250b9e3b9d5e6b2080cb782f9698e","1225f4f50154dd49d4853e4efc3ddf77","5d3e2b2ee668b2bc071b8d4027c6b8f1","2ac1d8e16e47e97db3c60d728270ad5a","5919e4e3e06b617d967dc6e8fecb701b","1da8e7c92c86fc8dbab5287bdca91ca1","752940da17469330c38ab98d04f3d6b8","3b2a270b90b3e24a25cc991df40da3ca","8dcd1e4e37838b49214f10c50ef5a5f0","51ad216fcb4afe42b9ef01ab472a2914","0befb96279da248f6d49169e047ee7ab","a7cde18f991e97037a7899b7669e2548","99634dcaca690066187e30c36182bf19","ddd12566b99343b96609afa2524ecec3","61d5944634d735c3e6efc3b1349de740","ac27de51896a5ba2fd0dda9b7955a201","b747aedf0f3e4457c6d02bc5af7c0980","df6f39d30dc5e9f4155514cdefb54620","830debd1f6d39c726c2d3208e3314f44","0a50081a6cd37aea0945c91de91c5d97","b558fa064d0d3f94f5e4c975375cbad1","f0881b3c3d1535685d6190df4083f515","a531fe822618b6a917d50bee001c95a1","a6d4706baeb9ab97490d745f7a2bb11e","4cdbcfa0d6fd2e7de6ec0030cfb2322d","474f517eb23bdfa4c320c091c3eb2dba","11ca68ea3500cb03db1f4008d18cb6b2","769bc25454799805e83612f0f896e03f","3c47d45f09948b8e6fdb5f96523bc60b")
