index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("3c92bfc71004340ebc00146ced294bc94f49f6a5e212016ac05e7d10fcb3312c","5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5","678ec8734367c7547794a604cc65e74a0f42320d85a6dce20c214e3b4536bb33","7b295a10d54c870d59fab3a83a8b983282f6250a0be9df581334eb93d53f3488","8631ac37f605daacf47095955837ec5abbd5e98c540ffd58bb9bf873b1685a50","1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc","9ca333b2e88ab35f608e447b0e3b821a6e04c4b0c76545177890fb16adcab163","d0510e1d89640c9650782e882fe3b9afba00303b126ec38fdc5f1c1484341959","6cadab96185dbe6f3a7b95cf2f97d6ac395785607baa6ed7bf363deeb59cc360","1d3b5c650533d13c81e325972a912e3ff8776e36e18bca966dae50735f8ab296")
