index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("4e5455caf9e5499e82b8ae6ecfdb69556dd780d8","85b35a6b5901283d7f4b52061ff51664f3577aef","56a57cba25825e2bafc3a5b458b7352729e60d97","8c9958b66f6aa22216c81ef63ce19d93cc1b114c","36a081ee82331fb6862de59135560272c578ca1c","361d5b350ca1a9b59773a06bb9805c7317afc1b0","d14f4013f7ea153059bd6ad2de65ed10be048145","25f28152bf75c229ebce8ffb90ecc669237896e9","6568ef35c5c93802de8009ac646e44f3c6881166","e038c7cebccecf859cab3256d0d842f90247deea","4c7009b7bc514180eedfe76e970ef64dfb629f81","d154d8f263737f47d41bb0bb6663333ef7dac8e8","cb7724df692a1da2cd1dde658c9e71286610c3d8","dd6c5f36f87f40ccb6f4940c31042303d9aa2b93","2a7b8736e2664a733b45dafd5e80435e48594be4","839e0bf35da3945558d8d999b2c71e8c11b05410","9a1f8f4b78af721649e98aa87f6f4797f364d4cf","a227bc1e67b3fee42f6236f858d75269e2e684db","254361d4af8c6100d780f25a16208bb5a247005a","bd8dd89c484b8c171bc6fa77ba0823eaecc59a4d","9b14fb911d72eebc444e217bde99f2b304ba6752","a6390871b17b96767309644d421a83965b6031c9","edddbf8df94d1369bc3e30dea76858dff4aa3be0","61fd16cf9c6a5de02fbdb6e6d7240a00a4a62d7b","e7788b2df21a2729ee261cfcc0c2a17c7e458a61","b677d3014f859dcea992ca94283e3505b000cfef")
