index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6dd8de093e391da96070a978209ebdf9d807e05c89dba13971be5aea2e1251d0","81cf3b162a4fe1f1b916021ec652ade4a14df808021eeb9f7c81c8d2326bddab","8695945155d3a87a5733d31bf0f4c897e133381175e1a3cdc8c73d9e38640239","b98f8989e8706380f779bfd464f3dea87c122651a7a6d06a994d9a4758e12e43","cc131dd1976a47ee3b631a136c3224a138716e9053e04d8bea3ee2e2c5de451a","2a353e9c250e5ea905fa59d33faeaaa197d17b4a4785456133aab5dbc1d1d5d5","bbbae0455f8c98cc955487125a791052353456c8f652ddee14f452415c0b235a","447369281ba26b7a6da4f659aa31026605aa3c6f","c5c93ba36e079892c1123fe9dffd660f","e1df0da64a895ff00fc27a41898aa221b5b7d926","03e07c538a5e0e7906af803a83c97a1e","600452b1cff8d99e41093be8b68f62e7c85f23d7","c2e577c71d591999ad5c581e49343093","d446e06e40053214788aa1bad17b6d3587a2a370","b860198feca7398bc79a8ec69afc65ed","c4c64da81995044ea3447b8ffd07689382b7487b","35a432e40da597c7ab63ff16b09d19d8","b798b881b89526051ee5d50f24239b3a952c9724","cb20b167795db258b307ddee91ded87a9e7562d0")
