index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("5bde055523d3b5b10f002c5d881bed882e60fa47393dff41d155cab8b72fc5f4","d7d5c1f933846823ceb0f8c69bb41801713a6922741183501c344081a48f500b","bcc10098b91bbb841ed5c1ec663436738479d071a96145f43b121881a5517d35","6b7d2af6eeff8f2b73dae75037ca783e0f38510caadf5a9ca1f7be5bb9aed70d","d1119e6de574a16d7cda385555da5a742ae2cec44fdd322603a8c31e3055a2d2","8ef56b48ac164482dddf6a80f7367298d7b4d21be3aadf0ee1d82d63e3ac0c0a","20011cbb63b69bf36e6bcd7092d54d294a16c0f9e3209a85d4b5a02238bd928e","9171f1d87e8f575ff16b16eea2b7eb14e4d3f2348fa23738ed11dfc560073a59","3ff96535114625069b4bad655b46e82b9b214bcb17815454f38cf554a9846263","36b4ad17ac45dd371a79600ad09a91233d087abc2038b66f3911d4fe1dc2a6f0")
