index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6b37aec6253c336188d9c8035e90818a139e3425c6e590734f309bd45021f980","77a3fa80621af4e1286b9dd07edaa37c139ca6c18e5695bc9b2c644a808f9d60","73b9cf0e64be1c05a70a9f98b0de4925e62160e557f72c75c67c1b8922799fc4","e781ce2d795c5dd6b0a5b849a414f5bd05bb99785f2ebf36edb70399205817ee","0f22e178a1e1d865fc31eb5465afbb746843b223bfa0ed1f112a02ccb6ce3f41","291bc4421382d51e9ee42a16378092622f8eda32bf6b912c9a2ce5d962bcd8f4","aa99ae823a3e4c65969c1c3aa316218f5829544e4a433a4bab9f21df11d16154","ddcf878749611bc8b867e99d27f0bb8162169a8596a0b2676aa399f0f12bcbd7","bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df")
