index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603")
