index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e4fe3a314a3aee5aee9c55787a33671c","e48716521dc48425feae71bc9dc768cd","8c4b32e8ee9e0b2f8dab01364971ffff","e33a3a90f1f8fa6d8f17bc6151b027d6","6c58b8b1e3b36a5a124afd110c109ebc","b76d7890a7a7ff6d0b1151a8251e318f","9e0941c4851d414b5d25dd15872c3e47","fd83b3e9db57838b62c5baf8218ce5a8","2ddeca6511506fe435dc1f63b4cf061c","f64a799ff16aded3f4d6706ffbd7e6dd","fb973c8bbfdba234ea83ee20084dcac9","5368b1122c10fa7850f44d3e16fc18fb","31a591a28198f05e9ab4d12609a9ce81","5f561f217a8046de8cadf418ef4dfda0")
