index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ce65092fe9959cc0ee5a8408987e3cd4","87635d7632568c98c0091d4a53680fd920096327","27c51026b89c124a002589c24cd99a0c116afd73c4dc37f013791f757ced7b7e","0c8663bf912ef4d69a1473597925feeb","78294dfc4874b54c870b8daf7c43cfb5d8c211d0","db034aeb3c72b75d955c02458ba2991c99033ada444ebed4e2a1ed4c9326c400","1bd4911ea9eba86f7745f2c1a45bc01b","f64c63f6e17f082ea254f0e56a69b389e35857fd","25cbfb26265889754ccc5598bf5f21885e50792ca0686e3ff3029b7dc4452f4d","5a7a90ceb6e7137c753d8de226fc7947","204a603c409e559b65c35208200a169a232da94c","1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128","73695fc3868f541995b3d1cc4dfc1350","158c7382c88e10ab0208c9a3c72d5f579b614947","ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4","76ba5272a17fdab7521ea21a57d23591","6b831413932a394bd9fb25e2bbdc06533821378c","ecd001aeb6bcbafb3e2fda74d76eea3c0ddad4e6e7ff1f43cd7709d4b4580261","8410893f1f88c5d9ab327bc139ff295d","64a1785683858d8b6f4e7e2b2fac213fb752bae0","318c431c56252f9421c755c281db7bd99dc1efa28c44a8d6db4708289725c318","cc7207f09a6fe41c71626ad4d3f127ce","84e749c37978f9387e16fab29c7b1b291be93a63","28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa","e01b393e8897ed116ba9e0e87a4b1da1","313b231491408bd107cecf0207868336f26d79ba","4a9b37ca2f90bfa90b0b8db8cc80fe01d154ba88e3bc25b00a7f8ff6c509a76f","ef25d934d12684b371a17c76daf3662c","b062773bdd9f8433cbd6e7642226221972ecd4e1","08530e8280a93b8a1d51c20647e6be73795ef161e3b16e22e5e23d88ead4e226","faa8eaed63c4e9f212ef81e2365dd9e8","0d3a5725b6f740929b51f9a8611b4f843e2e07b1","b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe","http://www.microsoftcom/status/getsign.asp","http://www.baidu.com/status/windowsupdatedmq.exe")
