index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6201c604ac7b6093dc8f6f12a92f40161508af1ddffa171946b876442a66927e","b9a0602661013d973bc978d64b7abb6bed20cf0498d0def3acb164f0d303b646","c71e0979336615e67006e20b24baafb19d600db94f93e3bf64181478dfc056a8","e69177e58b65dd21e0bbe4f6caf66604f120e0c835f3ee0d16a45858f5fe9d90","1e725f1fe67d1a596c9677df69ef5b1b2c29903e84d7b08284f0a767aedcc097","b0a58c6c859833eb6fb1c7d8cb0c5875ab42be727996bcc20b17dd8ad0058ffa","1CC32C7F2C90A558BA5FF6BA191E655B20D7C65C10AF0D5D06820A28C2947EFD","6e46054aa9fd5992a7398e0feee894d5887e70373ca5987fc56cd4c0d28f26a1","37fa5108db1ae73475911a5558fba423ef6eee2cf3132e35d3918b9073aeecc1","28d78e52420906794e4059a603fa9f22d5d6e4479d91e9046a97318c83998679","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2b","a73a4c0aa557241a09e137387537e04ce582c989caa10a6644d4391f00a836ef","10456bc3b5cfd2f1b1ab9c3833022ef52f5e9733d002ab237bdebad09b125024","d295712185de2e5f8811b0ce7384a04915abdf970ef0f087c294bb00e340afad","a618b3041935ec3ece269effba5569b610da212b1aa3968e5645f3e37d478536","3629d2ce400ce834b1d4b7764a662757a9dc95c1ef56411a7bf38fb5470efa84","824100a64c64f711b481a6f0e25812332cc70a13c98357dd26fb556683f8a7c","a6b9975bfe02432e80c7963147c4011a4f7cdb9baaee4ae8d27aaff7dff79c2")
