index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("74f7a3b2a5df81eb7b5e0c5c4af8548e61dc37c608dda458b75b58852f2f2cfd","f332a941d786148a35cec683edb965ea4bbd6ff6bd871880f30dc7d42b922443","6f9512a5f2f86938075b14e34928d07cdc78f46ed9401dea799f131f7a3d9644","c3056e39f894ff73bba528faac04a1fc86deeec57641ad882000d7d40e5874be","e98d8ae395ec7d2bbc29c21fa2bf79e26ada9d8bd5098487027b32aeae8b03b7","6a9979638d4e4719cfef65bdd6e1d7c0b28b84df9ca73a3bc1e919e9a1df50df","7fda8879c55398434ab0f423b0f1c75658bddd925d90437ad2e6fd8723cb1d78","bd3be94afa57936741a5debde1eff537dcd7c7bc79ccfa9739c4614efc424eeb","e89079508dca536019535bb021ae388a990d9cb64e1e6bd769e6a29ec237d8be","52238d884006a06e363e546dcfa88c1b2cbdadd80c717e415ac26956900f40bf","697db25145c2d37f0a521b3ca6b49f1f4d7c3e0c2e57804f5317b3d0b6d242fb")
