index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5d2e4fd08f81e3b2eb2f3eaae16eb32ae02e760afc36fa17f4649322f6da53fb","a63ba88ad869085f1625729708ba65e87f5b37d7be9153b3db1a1b0e3fed309c","2fd9cb69ef30c0d00a61851b2d96350a9be68c7f1f25a31f896082cfbf39559a","c64b67c116044708e282d0d1a8caea2360270a7fc679befa5e28d1ca15f6714c","91062ed8cc5d92a3235936fb93c1e9181b901ce6fb9d4100cc01167cdc08745f","a25f91b6133cb4eb3ecb3e0598bbab16b80baa40059e623e387a6b1082d6f575","9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7","06919e6651820eb7f783cea8f5bc78184f3d437bc9c6cde9bfbe1e38e5c73160")
