index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e800d1271b15d1db04280a64905104a912094d2938fd6b024ce143f1221d22f5","338ac127e81316d3b4a625ddf28eff2693778f3c8f1050cc06467845232e8da2","15b9f282717b6539e44a7a5e0ceafaae1eff09cadfbf46982e4d7e78a605cf3c","11243b8c4da386fed7efd500076f5671f649c25b7edb90416ec91b3e4a2073a5","69411eebef102e63d86bd3e88c363375934ed9dee94ca9342b694c4be232c792","7de07008373bacf77ce9079c2374dd87afaa605b857b8ab440661faa0ca7d504","5251fb2f9979dbc21b83e6e770c767595848ad9b01c94713683613a6d8561561","7251149fe93811b5b1a84418d0fe07296469c34b57f70f9107e0b9a1726b1080","1efd5006979b10c60eefc367f529799b7b9dd2be1162e0195b22eedde32b7f7b","06d1a0752960576051ae5845d2ec38154a33b5de36ed268d61da26574bba3368","ed6e026059653e3b6d05a479ad27c1b38f790a840bcef38f1a06a73ff476525d","84ea56d15ebb895b1688339fb230e2b9b61b35389cc7ea8dedbd2f92bb92ab10","130f0a4293fb842d99d2044d449e3320de8add982177ed1ad03ba0fef9bcf096","80185c0c10a4046fd4ca1242ccbd63bef7765c6e93a3f53c90107d34e0d790fe","06be6b9b7163489854864292f9516558f6e192dda01560ea772fbc82dc1471df","96f0546ac6c722576f860f9a23d35fd93a8df1c547bd92d0836bb845cc875002","0c19f42339735cdd9d6a4c55e2f8f93b9d559d7a3420557487a75f67a2a946c0","5fe77c71b75b71d95f2d62c71f3054afce1f3026873d107a9a56d701c503c2d7","43f3a7a5300fa89b7b9783cf97ca3a5f9d1f45535e71a80ac2b8b16d21a64fe8","1b3ee2bbb3baff96e3637b0ee3ad5831c9c7741db7a32411281d0bcd4f26f012")
