index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b9bc445af6729a95599f1a39e37f559f3ca18dbbc8ae4e60263af565ef4f4db3","882484b56ad4418786852f401b1b81f31030bec8566b6b07c9798d4ea3033516","ccb1337383351bb6889eb8478c18c0142cb99cbb523acc85d0d626d323f5d7ad","d8488f93b8c096838b3d9b335091216667ce4ffc7ae2cf3c8925271f0f190c11","b6ca47065e68aebb007657ff0e6b0dfa0fc4e19823f336ab73f42b25dd5cfc22","206278545b897a7e2ebb1ec4687e6ec31d7ca8f1828792a34f4fca745db8e3d4","53b1b3c6f73312cdae7be69d16a42d298fae0cb3721c7fc11252f65b10f5a323","2db54628a877ab40463a128496cb94523ccae6186d1648c6f372c719f6ed8152")
