index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("48aa2393ef590bab4ff2fd1e7d95af36e5b6911348d7674347626c9aaafa255e","11b71429869f29122236a44a292fde3f0269cde8eb76a52c89139f79f4b97e63","7e646dfe7b7f330cb21db07b94f611eb39f604fab36e347fb884f797ba462402","ffb45dc14ea908b21e01e87ec18725dff560c093884005c2b71277e2de354866","b79633917e51da2a4401473d08719f493d61fd64a1b10fe482c12d984d791ccb","44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5","2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd","06b4aebbc3cd62e0aadd1852102645f9a00cc7eea492c0939675efba7566a6de","2ed5660c7b768b4c2a7899d00773af60cd4396f24a2f7d643ccc1bf74a403970","e300c44b45b07f3766586e500f4f3596c23ffd80171eaa5334bb4db3e8d027e0","4d03c2a47265eab0c87006a4a2965fcf394fbdabb8e86cbe16b36376d04b8143","1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc","f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1","de5f6cc6a3eaee870f438a43e1e262283124aa1cfa11ad395a05c4bff026c09f","1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252","001c68b2f71d1fcb9cea1bc42ed0b4c2b6d9fce4b4754d05d6a5a1f28573373a","09b7d9976824237fc2c5bd461eab7a22","f5244c0d5c537efb24c9103e866eea26","6ca002e77ed2c70dd265bea42b89d969")
