index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("84820f3eb491a2fde1f52435cd29646c","8c6e135495fcf8898de62e6793e3cd06d3025461","df430ab9f5084a3e62a6c97c6c6279f2461618f038832305057c51b441c648d9","0608c64c57dcc09246be00f0b2767e6e","02642663bfc7be0c06051f4b01c9861102c71850","0162641163a30a2edff787eeecc733ab1de46f03e213743dc768d39eb3075985","193964c937493b979b1e9649a83ff000","d85a46b51b7cf9fe24783508e0739ccee3cf5874","d6c1d2e77ce21d5a026e7abf99c9fffe55d87b282f460dc737da231211a12a0d","56cabcf95add39a6feb09391ccc40dcd","84c8921f18a6d7861e842e4edb9c0c96142b5f75","4e153342189a55ffed34a91f2a3f4440af1acbf7dc58135a165a06b4e657556a","0bfe64b866911620f273a1d306984d29","4371132451177999fde66054fc84382a94f606c0","c66590a2ffbe53667be147c4e74e626764aff9eb31017dd8b8f161279fd0f4f6")
