index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2cac346547f90788e731189573828c53","df23328340d60fea800d4d21fa36837d7a7d5b72","66b58b2afd274591fb8caf2dbfcf14d9c9bcf48d6c87e8df2db30cdefb0d1422","5e525fbe98687c7779b8f90ccbda8573","a8bf2c2cb0a1815f6421a9c55558154c40b9038a","b152762b9fe566ee711919ba6aeaed44ce08cb8ceaceee761d9b78daf0a70cd4","c0318e3daf3e4b05edf2c50c6b5f16e0","fec997534aefa07eb71ae1a080a63f8aab34bc5f","dc007bb739b9f8150783eff06aa78f3e2883af7ea1829f66e4ad738bc864479d","7c9fd2a40892860e8258e8362cea782d","5437c3a9b7954cac845e6884092b5b8b061a397c","dc628d16647055c299a764f124cdf26a0c13fe398c155883cab25a4e8dfae3cf","c5f5748e2e074337df062d4011b48e0d","d4600969ac25d5b8a545b14cd48cb4eb74d264e3","900bf6927eeea0f211dd52bfc3b4cb0365a58b9ebf8074a0e9cfa5bf8723468e","f6848b4a4b344699342f4f1637094fd3","d8e7c6bc9e2e524c7f4e8fd77c37e1573d685bbf","0bb97181b40e952ec6ebb1316cd1a8293ab7789c7ba74832c4c5560b6ea3bac7","de1e7c29d98778fd7fbb832bd599b367","954a1c95a7b58f7af9cba33c32c22936312d5211","f51d1171314031435e860a0232fcc143b30efbd9dabcb900da8656fb680ebcc4")
