index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("Indicators","7c935dcd672c4854495f41008120288e8e1c144089f1f06a23bd0a0f52a544b1","e09183041930f37a38d0a776a63aa673","05c63ce49129f768d31c4bdb62ef5fb53eb41b54","0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6","d3cafcd46dea26c39dec17ca132e5138","6f110f251860a7f6757853181417e19c28841eb4","10ab76cd6d6b50d26fde5fe54e8d80fceeb744de8dbafddff470939fac6a98c4","f659d1d15d2e0f3bd87379f8e88c6b42","9c8f5c136590a08a3103ba3e988073cfd5779519","e737c901b80ad9ed2cd800fec7c2554178c8afab196fb55a0df36acda1324721","31f8eedc2d82f69ccc726e012416ce33","dab33aaf01322e88f79ffddcbc95d1ad9ad97374","c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02","825d6049ba8600ee5fefd817ac5444b4","31c4dfbf7029c5ca8334042faaf906477be1ec17")
