index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("12eaac1b8dc29ba29287e7e30c893017f82c6fadb73dbc8ef2fa6f5bd5d9d84e","981b28d7521c5b02f026cb1ba5289d61ae2c1bb31e8b256db21b5dcfb8837475","6dcfa79948cf90b10b05b59237cf46adb09b2ce53bc2c0d38fce875eccd3a7e1","0af8bf1fa14fe492de1cc870ac0e01fc8b2f6411de922712a206b905a10ee379","7d5018d823939a181a84e7449d1c50ac3eb94abf3585a2154693ef5180877b95","b5a4804cf7717fda1f01f23c1c2fe99fe9473b03f0247bcc6190f17d26856844","1975bea7ca167d84003b601f0dfb95c4b31a174ce5af0b19e563cb33cba22ffa","56243c851b13218d3031ca7e5af8f2b891e139cbd6d7e3f40508e857802a1077","0b8d024ec29619ff499e4b5024ff14451731a4e3155636a02ef5db2df0e0f0dd","0b168638224589937768eb15c9ebbe795d6539d1fbe744a8f065fedd569bfc5e")
