index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("3dd8439a4fcc880a5cd5df005e15638be298993c141c200e47c769ef2e3ca1f4","6d6c788c928c1408dd19de83b6dd1a12092c96b179fc17a66414886cf8d1daf0","bcff5e6d151126f0c3691b8c0fc46fb4e586ee5559068ac3acc2bd478c1c9ca1","d5a528f524401a36a6366619f3b2d83efed740801128f527e9dce80e68060922","a8be7f50b0554e519a8c98ec39d2ba76e0655da133c8795a41d36dc29d9c7433","85eec9d888d584c33b597d6e40f1a74b4d00db9838d681339b845bb87c14cd10","90ba262acdb6fd1ead5167a7347a1d66ee0075c24ed18d5b4cb07933a4c42805","506b40e0f199b32a597bb44aa90343cc14830796f2bf3fd7c3fa281a52ce27c9","3013ab2c5c8c8a217e9484f6a46fbacacbce92475dbe7f8d5e3f04d23974de83","89665ab4e6ed00809208a4656bc38da81831fd4b8044d7039e5542fe47b81d0e","9486f5c47b037e87732c0c7d7d686334d7c3761133735f8b6d65b3aa479ec113","ecb4b09bfd34adc671537c98d1b1cd6f662e66077904db0da9f88e2054ef9edd","eb845853386ca89043ac04ec399e5111a906fd2bcde24ab02494eb035fdd1224","ded871d290ad309d228c00107d87e88dfadbc9d682ff3e04d9fb63f2c34aa256","3dc895e597d503590ef117dd942709a180392c9522c704901e272113bea8310f","f02496f4b9da09ae0fbf1b59fbdc4b2193cc9e03134ee4c5e71141bb618fdd0c")
