index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("250bcbfa58da3e713b4ca12edef4dc06358e8986cad15928aa30c44fe4596488","9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926","c24c59c8f4e7a581a5d45ee181151ec0a3f0b59af987eacf9b363577087c9746","5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2","312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775","f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429","7cbfea0bff4b373a175327d6cc395f6c176dab1cedf9075e7130508bec4d5393","2598e8adb87976abe48f0eba4bbb9a7cb69439e0c133b21aee3845dfccf3fb8f")
