index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("70aa5b3516d331e9d1876f3b8994fc8c18e2b1b9f15096e6c790de8cdadb3fc9","13025f83ee515b299632d267f94b37c71115b22447a0425ac7baed4bf60b95cd","05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69","15cb93d38b0a4bd931434a501d8308739326ce482da5158eb657b0af0fa7ba49","6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41","6dcfe9f66d3aef1efd7007c588a59f69e5cd61b7a8eca1fb89a84b8ccef13a2b","28c4a4df27f7ce8ced69476cc7923cf56625928a7b4530bc7b484eec67fe3943","e990a39e479e0750d2320735444b6c86cc26822d86a40d37d6e163d0fe058896","4c4201cc1278da615bacf48deef461bf26c343f8cbb2d8596788b41829a39f3f")
