index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5292c0f5a7ea80124cf7584eacea1881cf2f0814fa13dcc0de56624e215aaba2","32792827c14075cc3091244425e302b1ebe3259c","2fbccfc5a1b91b2609e3ae92a93ff7cb","9d063a05280fbce6ff0fd62a877f3fd1e80f227522e16918e6bede2e6ee398de","05241afa180d70e17647b2d8cbc1660adbe3af88","d86283af2d5888b0ce3ea63eb26f60f7","4c68c840ae1a034d47900ebdc291116726fd37b3ab0b7e026fad90eaab84d820","c9a5314eb247c7441a5262a7cd22abbe1fcba7b6","110c4ae194e7b49ed3e3b254d599f7f4","7f96d59cb02229529b14761f979f710bca500c68cc2b37d80e60e751f809475e","489c36c9ea3fb90f61209d43efffd8d997a362c6","9ec1fcb11b597941bec03078cccab724","23a09b74498aea166470ea2b569d42fd661c440f3f3014636879bd012600ed68","ad33bab4bc6232a6666c2190b3bf9fc2ab2a720a","454f59dc7d3d7f228bbd4ddd4c250ed8","729fb24b6c18232fc05ccf351edaeaa8a76476ba08cba37b8a93d34f98fa05ed","900cba1d73ddca31a7bb7b7af5b3b7f1a0bc6fbf","6bc8be27898e1e280e402a7981be55ae")
