index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("857fc7aafbbf0d4c850c1b1585a72420600bdabe269f343c0c817614aa6c94cd","e92d1c2c1e145c1d6c42dd402e75f46e5edfb2bab5539c4d103d345b5ac965a3","18aa1b79bbeee6a731b897377233d54b1b2464eeb9a25dafc0debfc43af8c04f","32ba1f3b96cf77a08c041d4983d6afa7db8e1948d27d6a8dd55b7bb95e493189","b6ec96043dba7722cac4ed24b6979fc71a758bdf18ca44353c19194c172bf621","5727c2cd54b8408ca0f8e943cad61027a2c3d51da64f2f1224a6b9acc4820f8e","fc20b03299b8ae91e72e104ee4f18e40125b2b061f1509d1c5b3f9fac3104934","d5efd66f54dce6b51870e40a458fa30de366a2982ab2f83dddff5cb3349f654d","070a94ee0cd9ac1b1ed467353f5731e09cab136315447c04f53bc52d4fe3f8cc","7377efde4e4e86650ab8495f57ab4a76d4f8efe31e2962305b8c42a6cee70454","c78bc4fb8955940b3ac9b52cb16744a61f8bdaf673fd64fc106465241c56cc6c")
