index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("7abe62edccc9898135eeb581bfe3ee22\nfe0cb1ba270bf08fda39a4245a2fb85d\n1ff0c748e117affe35f933d6be6ec601\n2750acf3aa07ba0549f02692be21d105\n480c72045f0a979bedf893fda7f7de389fd66008cc295a19909179db37b0e012\n648abbc3f43c3a9a73edbe14756c850f91e670b10ea9f6a1487c44d373152570\n345d2c9e5a64a470a72312e0fb1efdfee52e46ee54de84c008329834e4536e75\n693e5c0b6c505bcfbf28d97a063965033c4d3e307a581ad587ece8ed31514213\n1eb73a4f9bd862c40cffdd4c47aef2d0a846ebb3\na3727afd81f2d791e6c1c0983417bc5e2f649516\nf460b5572335ac9d513a2e079d4f0aa54f7930a0\n900bc8ea141ba5ebdc58ba77c9f99ef491790cef")
