index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9b80a70be01700866a667085aad93b5a","90aeedae5648c65ca3c3fb2ac0380337","a0aad92f585dfc6ac762b5fc829e6fba","a84957660902eb17fd021f3d187fb787","7df9c7e23c2a1f8d3d87cd2460bb275c","cb3700cb561a449e6ff88978fb4ce1495982fe95","0408d6208440ef3caf7078361897f47c911de543","9ad2ae2c7fda526131ad6d535b21fe55d027d3aa","b589fccc88bd05df102b7584c356fce21be1de58","44069c654987abb00ce9068dd856bd2065a20aa9","b38807e5d6c4c4ae6811058fd868256abd6ed95f440e7f27ea81408bb9ee27fb","4f2e40e6353a2430a80824d113268b5cdb28a0ddb079418be05ba79dea608410","94e227ad918034ae9b569a380a5e6c8928428862236395e3357a085b03f25fef","e56eba93a0f3fab5e26c992a18cb6754c4b1a688e26a73c424d272babeab503c","a933ebeb8bec26881b2d191f5034b7d6cacbb8d2cc06eeb7327f752fd0fab24d")
