index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","c649e75483dd0883de2fef001a44263a272c6b49a8d1c9ea7c00c044495200ad","569c1d9b2822c17e64214421409c5649eafc5df9abd88d40a5554f57f32588e8","169d35bdb36c2bfcb3bbf64392de1b05d56553172a13cae43a43acbe2aa18587","b9d4ec771a79f53a330b29ed17f719dac81a4bfe11caf0eac0efacd19d14d090","4608a63c039975fb8f3ffd221ec6877078542def44767f50447db1d514eb0779","1e53559e6be1f941df1a1508bba5bb9763aedba23f946294ce5d92646877b40c")
