index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b133fccfd54e62681e3549c6947ca1521417745cc7f376c362ba118bcc0de39b","e76e206e8ae24f95a329b4f6ecdf1f22b76b07a8c628c0619b781bdba2d85732","fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea","c24938a87190df896986a22f9f66fb84401da04cda2a535856b0ce9eacb2bd0d","446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89","bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b","18b27eb6ec1898c6a8422e43e386f901eca8f09949eb63229d53f5041e5d2910","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7","138a262303b34cf0da63a5a8d32217db66f97ef5873dbac0f51ada3659c8cb3f","0000028f80066ad99544cc7a79caa649ee72eca2711b1b1128df61ffd13b0657","f8fd7b7eabb7b70e3f5a13bf8526eb620522a3c0aac6caf05b4db83d13e1e625","0c6705665e94b4d7184fe34185d0ea2706c745ddb71bb45bb194c96ebe2d7869","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de","a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7","b4c9d3abd4fe5b4be84884c933e8d9a6a80ce326e05432a7ecb8a7c28f393941","0d5996e68d654bb1ab31c89ae0a5b3c810f9f761f20df825d4ab5bba3d510bde","df78f7993dc9aaee7666a06a6dae52ba0fc6e63e01376474fa96af360cf566de")
