index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("3b55904d3b37c810fc230b991a257939","2e4c626e67df46b2a7258e73c04c4f73","b1095d0837dd11b5280fcb29b5a1bb84","18baedf43f4a68455e8d36b657aff03c","d75e1c01c59b63d73f22e84a8a8819bf","6ff538dfd4b6a6fa796ea74eed50c80e","e93eda81803040e70d64168c8a83228f","2442ff56720d1887cb46dd37ed732407","4704cd96029606d6f501826d41805486","0b53120151a20a46edf3ef85b8ac450f","72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462","3fd080ef4cc5fbf8bf0e8736af00af973d5e41c105b4cd69522a0a3c34c96b6d","9243bdcbe30fbd430a841a623e9e1bcc894e4fdc136d46e702a94dad4b10dfdc","0763e887924f6c7afad58e7675ecfe34ab615f4bd8f569759b1c33f0b6d08c64","dee2af08e1f5bb89e7bad79fae5c39c71ff089083d65da1c03c7a4c051fabae0","e6537d30d66727c5a306dc291f02ceb9d2b48bffe89dd5eff7aa2d22e28b6d7c","1d04d9a8eeed0e1371afed06dcc7300c7b8ca341fe2d4d777191a26dabac3596","1a31b8e23ccc7933c442d88523210c89cebd2c199d9ebb88b3d16eacbefe4120","25ce2fec4cd164a93dee5d00ab547ebe47a4b713cced567ab9aca4a7080afcb7","b524773160f3cb3bfb96e7704ef31a986a179395d40a578edce8257862cafe5f","362a16c5e86f13700bdf2d58f6c0ab26e289b6a5c10ad2769f3412ec0b2da711","e5417c7a24aa6f952170e9dfcfdf044c2a7259a03a7683c3ddb72512ad0cd5c7","056220ff4204783d8cc8e596b3fc463a2e6b130db08ec923f17c9a78aa2032da","877c8a1c391e21727b2cdb2f87c7b0b37fb7be1d8dd2d941f5c20b30eb65ee97","2e42b9ded573e97c095e45dad0bdd2a2d6a0a99e4f7242695054217e2bba6829","5620e71084c3bdc87a2522d4f5ad548a","837b3ddaaa7f209aac10480b43c248c20caaea2154ea13ef707e675a50bb2747")
