index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("730f72a73ff216d15473d2789818f00c","ca94159bdb17051a6cce8a5deeee89942c9154b9","27b8ee04d9d59da8e07203c0ab1fc671215fb14edb35cb2e3122c1c0df83bff8","aacef4e2151c264dc30963823bd3bb17","9492c378a14e9606157145d49e35a9841383121d","45c317200e27e5c5692c59d06768ca2e7eeb446d6d495084f414d0f261f75315","37355f4fd63e7abd89bdc841ed98229f","a8d46a042e6095d7671dbac2aeff74c7bb5e792a","b3ea0f4f442da3106c0d4f97cf20e244b84d719232ca90b3b7fc6e59e37e1ca1","ea34ac6bf9e8a70bec84e37afeea458a","fd443460ccd1110b0a77385f2f66a38d3f527966","fb49b940570cfd241dea27ae768ac420e863d9f26c5d64f0d10aea4dd0bf0ce3")
