index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("58840f757810108421b4ff20ec0a7c0b","0213da520fdca3535f303c90982fb766","a87a998dca3f8fc83eb174c2b3ea2718","25aa9eaf5b82cf3c72e8b8c4922d08be","aadec3a174e9230a3be5c7686a9d4776","304910197670db7d099919e153987d25","351ed3fd746efd068153a4e6508a54d7","5571da8b626b5273d42c976e57d66906060d534046b7d279edfa11b68dfe091e","a11fbdded656bcd76edfbc2dede2cb854cdb5f5dbc688a8a9b2169f0eef273fb","6e38be549b18c06c6b0a1dd52af887d27735bda55b38b26ff1ba4753ef33787f","dd67389d6ef9126c3d35788e10766efb35efe0cebd701381f2e42b5d532428f8","64bc49cc62b6f011d55a0c9da89d6795cf12952877b54e391ec973947b3f5c79","e14b867bb2ec63f082397bcfc26a9896b038c4afd528c3f6a8f206bea035eca6","3d54876b3633831a1fc0bcce43254771ce1c7a78d3e11c8df7e6538c4f632c21","6714193096036b5f1e5bb706fb556c0ad88e76c0","0a999160c327d37bda6546b570fccae3959b08d9","ce126ddd77161f60d34aaf0795f9aaeaa8ffc8fc","2d09a7153cd8c960bc37529576f2495c03657d32","f7744c61bc9bcc5f642f9338bde063f3ac9cedab","d8ff49159c4535d08b64f7cc943a42380115492f","38cdff52859cd25ccc58fc8fbb6112f80fac6535")
