index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f92cbda46583b39c6b0cddcddf18991e","e3c9ba02a5e309d2f8e8d06fc73b9554","5f82028dd93387d65eaacb63b130a435","55d2bf97855b006365dca9f413ab73c6","f6b5fdecdd6df68780af6d44f8c21e3dc842d636","b20f5287c4bec70168232497478c7692e516bfa4","9629c55914fa808bb8bcbf37a0aa3c912935a69c","654bf2dbe9d6b043b8ae144ead01a994508b735d","f91753cbcbcc7c8c2e5bef4126c2806e65328524f820fadb3f4332b645e28d7e","1489023ff883c2034d03a380d95074f84d22b8faee12a229737d904025d4f15a","2faef9e769bf8ac04a77ebe03e7d26aece3189e5ad6b0f316d90ec8999a94b04","77f92f280a7e3bd03a9eb9ff45dc9064616b7c6fe20e60a57015fc114f9df2d5")
