index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("7c33b30bb68c23c6dd40b9987e240ada","710df17dc32ce7be0e466a9463175dfe","33c50dea701c22da9ec1634ad2318c52","98da04a6b0b83989d1bee2eda1ca6c50","20c87c0011a4c4e3f04ec184b2da37c0","60f59193ea1690faaf08c1a784460c1a9a4c23c2ea80eda2a54a96f2b0e7dfe3","b7b48d122d433baf4f3902f723bfebd850d9696b1e815ba6cdd4c46b9bbb47c2","edd505213e1f137a37c50ea904ae312483c088ecc07bbaae7ce3a79d5fa188f1","ffca66beb014d70ebd6242618f97426da7466ea3e3fcf033b7ec39e9c94d2bf8","40043668b0ad9a66018432d3e9ffe7d0466a6348a8ee6250a606e841e114b270","68753739125fde303aa90a9503c517bff5a3fb4b","4296876daa15aa596e8d4a7155b9a332f46490a6","3fdae3115c3626154caecf3fd18560219b7d639f","26a122571f8f81a40ce78b06d7c9d89b19923fac","79961ba86f963f408e5bf955240a35626d720abc")
