index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("3160da060f2392474cceee22eba65eb3ce6f8117e3fd84c606386c92bfc863bb","dd510900d091a35f0ef6d906be087a1ae7969e3d75450cef475e1a032736cc20","a1706ec6772daa7a54c67117d5ce7b5fd5285f6245ad08f46b3b4176a7f1e021","537aa3ebc2b1cb9d43793e000dd5322ca780c7a274da5f46d5054b09196e2a1a","ae64762d044f4b108f2ff820c0744d199c4c33616af17c35c3634aef79c4e3ff","4ee62002f89dffa52405df9c082cba4d4dfa7de7a207cb3a3f37be76ca6454c4","ea3c8dbe0b30fb6d5c68eb55454b2a9471e8e21abb4343306445b4905370f51c")
