index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("31a274dfdbe93b117a5f62574bae009ad9bf6f4a66d5845b75e479547a608c6c","ba070e0328f5e093f35210904d53d4aa54339fdc1a11a1c3f68adee3ca0ff125","883e4d2893f3131e9b97e45e1b10acb8be70f3d2751cf3e9e75d24aced473a58","4e20ed2ab2a713ede6e184476838a145dc28621c","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe\nab3dee7f0f03e7c7262756ab816ad4b7","bcfbc009367231fd99ef0362a1e572aede015074","c4c27b95f86f87ebb58d2f2ae00e5ed9","d589723c86d2ddefe3119c506e83814739cfa54f","ffe2bd374a8bb3f22a77798c3cb5d905e7aa6bf2","736a8934c94e268bdd91c53a7f746fdf","a4bbf468fa1b3a7b7d29d65595704544","3501ea51bad76648ee577cfbb0cac51d3672a292775396ee6c50605cd2937afe")
