index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6ab773a5be4d7933c2ad05923770f6ab","68ffeaf9a2b5a739e60d0119addf7b5b","1baa019d5241f7cc2b087634db8b276f","c21114e07083e1ab4426c1d7e0d197e0","d4045b5d1638ba20b609b208621f20c9","d4c6d52c7d5a042c3aae20f3828224fe","8286ab5ba481d985c5cb6596b3f95d7c","9b9273713ac93d3220d3fdc52b7e9e9c","34dabc34c4680334facf6d115f32e436","29fec48669e6253cbd659797de414c89","53769f09f92826435c3a22b5c9931378","f93a207755ac1d4f09ebb21349f088c4","8f26451d4812f5f5b2d331430f75cb33","ef68df64435008091633c10001efa3f7","bb50651fcb6ea1a57ae2f21f31bfc9be","f5eee8823916da87c24c85e7ecae34cd")
