index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("46569bf23a2f00f6bac5de6101b8f771feb972d104633f84e13d9bc98b844520","6462b8825e02cf55dc905dd42f0b4777dfd5aa4ff777e3e8fe71d57b7d9934e7","6e204e39121109dafcb618b33191f8e977a433470a0c43af7f39724395f1343e","89bfcbf74607ad6d532495de081a1353fc3cf4cd4a00df7b1ba06c10c2de3972","e43b1e06304f39dfcc5e59cf42f7a17f3818439f435ceba9445c56fe607d59ea","e573d2fec8731580ab620430f55081ceb7153d0344f2094e28785950fb17f499","e68dd7f20cd31309479ece3f1c8578c9f93c0a7154dcf21abce30e75b25da96b","ab317c082c910cfe89214b31a0933eaab6c766158984f7aafb9943aef7ec6cbb","df15266a9967320405b3771d0b7353dc5a4fb1cbf935010bc3c8c0e2fe17fb94","b7ca6d401b051712cb5b1a388a2135921a4420db8fe41842d51d2ec27380b479","5f3bf9c07eedde053f19ce134caa7587f8fb6c466e33256e1253f3a9450b7110","c00fbf3fb992e7f237c396d69081246570cbd60d6c7a2262c01ae4d8e6f17ddd","b2adf8ec7ab5193c7358f6acb30b003493466daee33ea416e3f703e744f73b7d","a8d350bbe8d9ccfbb0c3e9c2dd9251c957d18ce13ae405ceb2f2d087c115db15","2d07f0425dc465b3a1267a672c1293f9a3d0cd23106b7be490807fea490978ea","f5d25777331ba55d80e064dea72240c1524ffcd3870555a8c34ff5377def3729","9d6ed8396ee79ae92a5e6cef718add321226def3461711cf585e0fd302c961ae","1c12ff296e7d9f90391e45f8a1d82d8140edf98d616a7da28741094d60d4779d","9c71500a9472814f7bf97a462fe9822cf93dc41e2e34cc068734586d5e5146ef","480cf54686bd50157701d93cc729ecf70c14cd1acd2cb622b38fc25e23dfbc26","0bad18cb64b14a689965540126e0adbc952f090f1fb7b6447fe897a073860cdb","c5f7492a3e763b4456afbb181248fdb8e652575cea286db7861e97ffcd1b72e4","f3858d29073ae90f90c9bb284913752533fe1a6437edd6536e4b1775fc8f6db4")
