index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0f20e5ccdbbed4cc3668577286ca66039c410f95","14e4557ea8d69d289c2432066d860b60a6698548","28f73b38ace67b48e525d165e7a16f3b51cec0c0","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","665572b84702c4c77f59868c5fe4d0b621f2e62a","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","8c507d26c2fec90707320ffb721ae626139bbf11","a67686b5ce1d970a7920b47097d20dee927f0a4d","bdb0c0282b303843e971fbcd6d2888d834da204c","46ca0c5ad4911d125a245adb059dc0103f93019d","9bc1972a75bb88501d92901efc9970824e6ee3f5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","e04760f670fab000c5ff01da39d4f4994011e581","09170b8fd03258b0deaa7b881c46180818b88381")
