index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c6323a40d1aa5b7fe95951609fb2b524","cf8c0999c148d764667b1a269c28bdcb","37973e29576db8a438250a156977ccdf","d966af7764dfeb8bf2a0feea503be0fd","778942b891c4e2f3866c6a3c09bf74f4","1315027e1c536d488fe63ea0a528b52d","b0e795853b655682483105e353b9cd54","e0dd4afb965771f8347549fd93423985","739875852198ecf4d734d41ef1576774","bf5a3505273391c5380b3ab545e400eb","0ee8246de53c20a424fb08096922db08","80ab98c10c23b7281a2bf1489fc98c0d","4c4abe85a1c68ba8385d2cb928ac5646","e6a1977ecce2ced5a471baa52492d9f3","fdc5505d7277e0bf7b299957eadfd931","2b2cbc8de3bdefcd7054f56b70ef58b4","57453d6d918235adb66b896e5ab252b6","00a2952a279f9c84ae71367d5b8990c1","5eac943e23429a77d9766078e760fc0b")
