index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee","8f45a89978ea72a7c3304c93cc56ac18087663ae33daa9f30f919652ba961175","eb8a15b1a42127970e7facc6133131dcc073a201419d8cc88c3c316819d1c2a2","afc48eabd725325d00324625eb9035c450d730c0b07d4d5a7246cbb1a3a443eb","2a4193dcb95c7307e0a4f5586446c1c4adad17733a102a40d0b9227649191ff9","5f9eff953d7ca49f594a864517dfdf37950a41693e53b79aa3a5c396613031bc","52a52e958a0fef6aa14f27083f2d8675a20c2148be6456cacbda149411719b92","850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38","5e82fc65d9dafc6da041e732597719aa9872bc82d8ff52c272277a1a49b8c9aa")
