index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ea45ff4245ba35726f6d06027b2dc193","671e9530161aeba00488a62d6c49696d","6114b554657e03e35ba8a3039207e1d0","57967b6e7787ff7365db472b97691ca1","ac459d55722216dc06efea36e49a4f9c","61c5aff17be4e52804c6711b67e5f35e","9f0f848cc5f6daecccddf8ca0bed1f10","86f35a808e619ab7ba6d18f6cf3d7910","e49594ffa18e330c8692d88dc8e73752","033f9150e241e7accecb60d849481871","3511a7e15d98a5bc3959dd06901f12ec","481db13dccd513cbb06928217dcb8ece","eae88ccc4812a9b6ebbd4f18d575ab80469465e2","d197290d16c5e8d30c02494d9ffd24f40f843b86","a577a3d845c24b6d3937a7469440cef8c68167ba","c7c888ac1b1b48275b16dbd34abd23daa8cec8da","827d8bdbb72aad85c546a3fff6c7828a817f09b1","88447de477b039ec915aa6b0dea3925248e374af","df62c948fd129b268a1ce57ee25a0c4d0a7b6b87","b604e99299c0fa316401fba6dd38c751d893b1aa","7c046ae2a48dc43a0d8a1007b5ab83c678bfb9a5","09067fd23539df1ece704a92b2dca8e32f20f7c8","db74cd180021ce09e5d4f2ab8502698eaa4b7c03","82a51b613774ba74fcf331625d5f864843a872e5","f2338c80223f397b2206ce5bb8b5f2104d53879e9c97868f5469d871c1c0ccb3","1d7041c5540e5c53f8eb0c3f83d3f90e1ea6f51e02fcf37e4a29a7377259819b","8f4b410391df31f454c87d67e1b25d50407b192a4cd27b320daf740b5c2d1b40","b90382ed0462a0c27a4edec0bc952549846f0616e2e4c700d9c2da065bb28208","7092bc8e848c4a2d9d535096c7c40a052d11a9a2845c68c773897832787e02b3","0d2364f1545f94d54590e7f7a1d9140cd93af074444b29cfa639bd62b3d7415b","be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d","ef6b75ecbe506ad6ff5619348c041355e964a23a9e92595463e5550c4cb962f7","55bf44e4cf6da43c82d2042f6bccd9e2f927ae405cf78b06b4720a61a4889325","5013a9fc3766f0c065d44c9f6a6a8c0101811d7df4860dd50cf627a0d28ed007","b2451a590d31f41888802f0370b93ab9841a1b7f560f1be8ab6c6c6cb618e22f","8d4df9053506bd201bc44ea557dbec6757a722e9967b44c9478a9892fedcd40e")
