index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("995869775b9d43adeb7e0eb34462164bcfbee3ecb4eda3c436110bd9b905e7ba","4ce4dc04639d673f0627afc678819d1a7f4b654445ba518a151b2e80e910a92c","8514a434b50879e2b8c56cf3fd35f341e24feae5290fa530cc30fae984b0e16c","570e4d52b259b460aa17e8e286be64d5bada804bd4757c2475c0e34a73aeb869","000185a17254cd8863208d3828366ec25ddd01596f18e57301355d4a33eac242","4d225af71d287f1264f3116075386ac2ce9ee9cd26fb8c3a938c2bf50cca8683","760a3d23ee860cf2686a3d0ef266e7e1ad835cc8b8ce69bfe68765c247753c6b","8106b563e19c946bd76de7d00f7084f3fc3b435ed07eb4757c8da94c89570864","1990659a28b2c194293f106e98f5c5533fdad91e50fdeb1a9590d6b1d2983ada","d46bb31dc93b89d67abffe144c56356167c9e57e3235bfb897eafc30626675bb","f279a3fed5b96214d0e3924eedb85907f44d63c7603b074ea975d1ec2fdde0b4","31376631aec4800de046e1400e948936010d9bbedec91c45ae8013c1b87564d0","5123b066f4b864e83bb14060f473cf5155d863f386577586dd6d2826e20e3988","b314836a3ca831fcb068616510572ac32e137ad31ae4b3e506267b429f9129b1","5314c7505002cda1e864eced654d132f773722fd621a04ffd84ae9bc0749b791","33ee1961e302da3abc766480a58c0299b24c6ed8ceeb5803fa857617e37ca96e","2b507d3ae01583c8abf4ca0486b918966643159a7c3ee7adb5f36c7bd2e4d70e","df0096bd57d333ca140331f1c0d54c741a368593a4aac628423ab218b59bd0bb","0c2bf36dd9ccb3478c8d3dd7912bcfc1f5d910845446e1adfd1e769490287ab4","64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc","6a0c1f70af17bd9258886f997bb43266aa816ff24315050bbf5f0e473d059485","8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1")
