index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6cbd596168ada838550b6f6e535dbd36","f55db70dde213b489bed910191d180d2","8dad56f7c0cd6da28c485028d5bb79a8","e940a13c2509bd823153f8e0e764d0e8","b1d2c66939121ccd165b024d9451cb4d","2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8","faa9789e8bec8b7c03df02b12871231932b32fcd","4f683dda502920ee1c9dee80e35f9df6adef7ed3","44ac7375cdb880267f9d13c804c218e28c53884d","e08bddb59f360a78f9c38bf30f1ad45d8e3ec060","062ac2b77b288c7f0903fc111d58b2c4eb39defc9d28a4cf2eb8fe82cf6ee7fc","a14f063a781e8f2cfb216d767d6603de361237f81d7ce8192e43ae14f4098bb7","4d6e069c1377286bf1bf4d7826f7d53e4c85095486f97ea40d8bcb576f7da367","ee8234a035fd3796355d8bc2fcd0a8cc1bc7e0d737fca108b7d58ea0d588b414","d2b1703970fbd65823cb9aaaf0347160552f3840027dc634325c2214b02eed0e")
