index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b3e03a41ced8c8baa56b8b78f1d55c22","1e7d604fadd7d481dfadb66b9313865d","7870decbc7578da1656d1d1ff992313c","b457e8e9d92a1b31a4e2197037711783","1f1a3fe0a31bd0b17bc63967de0ccc29","c16a6178a4910c6f3263a01929f306b9","202a7eec39951e1c0b1c9d0a2e24a4c4","1f1a3fe0a31bd0b17bc63967de0ccc29","8543667917a318001d0e331aeae3fb9b","ca9b6b3bce52d7f14babdba82345f5b1","97bc894205d696023395cbd844fa4e37","c7256a0fbab0f437c3ad4334aa5cde06","fc8b6c05963fd5285bce6ed51862f125","27db56964e7583e19643bf5c98fffd52","61b3c9878b84706db5f871b4808e739a","6ea4e4ab925a09e4c7a1e80bae5b9584","bd47942e9b6ad87eb5525040db620756","67d306c163b38a06e98da5711e14c5a7","c09b062841e2c4d46c2e5270182d4272","747177aad5aef020b82c6aeabe5b174f","e73eab80b75887d4e8dd6df33718e3a5","ba741fa4c7b4bb97165644c799e29c99","064d696a93a3790bd3a1b8b76baaeef3")
