index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("95975a14eb3a414dd45da9a087b72051","31682721fb07535f7c2525a892ae4f0b","de37ec7611b2fbed9277670763ae6eff","55b2d59f9e60156965afcc9244200c6e","2e19653d3e7f5d210f393f56bb6e49ef994678774f85a11fab4c85c4dc4af119","bea1e82c7e9040eade0ffafa6e3a42d5a60b42e604443e90cf307ea9c0389b91","10ee143ad008bf45a83f4d4a80834af03ed80667fc5760f531243d72a4c93a19","d856fda682c152eac30360caef435d4a9448f501947945b63a55717f6d86859b","7f91e31086b543319af9fa0e8e217b4e083d9c0b","716098993c843c08ae6c26df25d7569d88a4ece5","40d15c446f4a0de312498bfb03436e8774ced4bb","c9c5025f30f91f8cb3a83b885bd06ed91e992af8")
