index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("2c89a18944d3a895bd6432415546635e","aac5d83d296df81c9259c9a533a8423a","8023d01ffb7a38b582f0d598afb974ee","5724d76f832ce8061f74b0e9f1dcad90","e7622d983d22e749b3658600df00296d","b9e4784fa0e6283ce6e2094426a02fce","bf80c96089d37b8571b5de7cab14dd9f","3243e04afe18cc5e1230d49011e19899","50520639cf77df0c15cc95076fac901e3d04b708","1a6d07da7e77a5706dd8af899ebe4daa74bbbe91","06a1f879da398c00522649171526dc968f769093","f8697b400059d4d5082eee2d269735aa8ea2df9a","cf7af504ef0796d91207e41815187a793d430d85","01735bb47a933ae9ec470e6be737d8f646a8ec66","cec327e51b79cf11b3eeffebf1be8ac0d66e9529","2e9215a203e908483d04dfc0328651d79d35b54f","98380ec6bf4e03d3ff490cdc6c48c37714450930e4adf82e6e14d244d8373888","5bef7608d66112315eefff354dae42f49178b7498f994a728ae6203a8a59f5a2","c0ec15e08b4fb3730c5695fb7b4a6b85f7fe341282ad469e4e141c40ead310c3","5995aaff5a047565c0d7fe3c80fa354c40e7e8c3e7d4df292316c8472d4ac67a","905b18d5df58dd6c16930e318d9574a2ad793ec993ad2f68bca813574e3d854b","e1de05a2832437ab70d36c4c05b43c4a57f856289224bbd41182deea978400ed","3751997cfcb038e6b658e9180bc7cce28a3c25dbb892b661bcd1065723f11f7e","7ae38a27494dd6c1bc9ab3c02c3709282e0ebcf1e5fcf59a57dc3ae56cfd13b4")
