index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("889fddcb57ed66c63b0b16f2be2dbd7ec0252031cad3b15dfea5411ac245ef56","59b71cb2c5a14186a5069d7935ebe28486f49b7961bddac0a818a021373a44a3","4d9cdd7526f05343fda35aca3e0e6939abed8a037a0a871ce9ccd0e69a3741f2","c8006013fc6a90d635f394c91637eae12706f58897a6489d40e663f46996c664","c69e558e5526feeb00ab90efe764fb0b93b3a09692659d1a57c652da81f1d123","45156ac4b40b7537f4e003d9f925746b848a939b2362753f6edbcc794ea8b36a","e68ce815ac0211303d2c38ccbb5ccead144909d295230df4b7a419dfdea12782","b24b36641fef3acbf3b643967d408b10bf8abfe1fe1f99d704a9a19f1dfc77e8","569aa6697083993d9c387426b827414a7ed225a3dd2e1e3eba1b49667573fdcb","60de2308ebfeadadc3e401300172013be27af5b7d816c49696bb3dedc208c54e","23458977440cccb8ac7d0d05c238d087d90f5bf1c42157fb3a161d41b741c39d")
