index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("7abb73b7844f2308d9c62954e6e8b7fc","032dd95a1299f37aaa76318945e030eb7da94da9","680b7e8ec8204975c5026bcbaf70f7e9620eacdd7bf72e5476d17266b4a7d316","457d7e3a708d1b5c6a8d449e52064985","84e7f4ff1f93a4297c2e2c4e54f14edb18396b60","322f8cd560d5e10e93af3ea6d3505c8de213f549e6627c3ef4664ed92ba55f56","339a79457a8cf3504312d394be3ece98","16db01fe25b0c09e18d13f38c88a4ead5d10e323","c564acd69efa62a5037931090bf70a6506419fdf59ec52f8d1ab0b15d861cc67","7a9b5c3bb7dab0857ee2c2d71758eca3","ede5ddb97b98d80440553b23dfc19fdb4adc7499","38b2d52dc471587fb65ef99c64cb3f69470ddfdaa184a256aecb26edeff3553a","7b5b7d96006fec70c2091e90fbf02b99","9e928a26aa3c0e6eb8e709fc55ea12dcf7e02ff9","013ccea1d7fc2aa2d660e900f87a3192f5cb73768710ef2eb9016f81df8e5c70")
