index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f1e2a7f5fd6ee0c21928b1cae6e66724c4537052f8676feeaa18e84cf3c0c663","951fad30e91adae94ded90c60b80d29654918f90e76b05491b014b8810269f74","d0268d29e6d26d726adb848eff991754486880ebfd7afffb3bb2a9e91a1dbb7c","a891d24823796a4ffa2fac76d92fec2c7ffae1ac1c3665be0d4f85e13acd33f9","2b40a804a6fc99f6643f8320d2668ebd2544f34833701300e34960b048485357","8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376","fb128dbd4e945574a2795c2089340467fcf61bb3232cc0886df98d86ff328d1b","41c9080f9c90e00a431b2fb04b461584abe68576996379a97469a71be42fc6ff","c7a930f1ca5670978aa6d323d16c03a97d897c77f5cff68185c8393830a6083f")
