index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("59fc33d849f9ad2ab4e4b7fe4b443a33","e4ed0f94e8ad9aeeb019e6d253e2eefa83b51b5a","2102214c6a288819112b69005737bcfdf256730ac859e8c53c9697e3f87839f2","b3b877f927898a457e35e4c6a6710d01","8ed3dfa1ece8dbad0ccc8be8c1684f5a3de08ccb","1285f03b8dbe35c82feef0cb57b3e9b24e75efabba0589752c2256a8da00ad85","254d757d0f176afa59ecea28822b3a71","3e59fff860826055423dde5bbd8830cceae17cf3","0ff8988d76fc6bd764a70a7a4f07a15b2b2c604138d9aadc784c9aeb6b77e275","225b9fb42b5879c143c56ef7402cbcbc","03369886e9fc4b7eacc390045aa9c4b7fffad69a","db91155087bd2051b7ac0576c0994e9fffb5225c26ea134cb2f38e819f385730","da6feac8dff2a44784be3d078f2d4ac3","c0f43d1d3e87b0e8b86b4b9e91cb55b4a1893b48","9bd9da44cc2d259b8c383993e2e05bbe1bcdac917db563b94e824b4b1628e87c")
