index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("93d70f02b2ee2c4c2cd8262011ed21317c7d92de.\ne9e4cd111cadcf94c469365354df3fd","d13aba752f86757de6628e833f4fdf4c625f480056e93b919172e9c309448b80","c3a447c5c6c73d80490347c1b4afe9d5","9d048e99bed4ced4f37d91a29763257a1592adb2bc8e17a66fa07a922a0537d0","bc3993769a5f82e454acef92dc2362c43bf7d6b6b203db7db8803faa996229aa","feff390b99dfe7619a20748582279bc13c04f52a","669e7ac187fb57c4d90b07d9a6bb1d42","18e96d94089086848a0569a1e1d8051da0f6f444","3f7bd47fbbf1fb0a63ba955c8f9139d6500b6737e5baf5fdb783f0cedae94d6d","f23465088d26e90514b5661936016c05","cf019e96e16fdaa504b29075aded36be27691956","eed59a282588778ffbc772085b03d229a5d99e35","fd8391a1a0115880e8c3ee2e76fbce741f1b3c5fbcb728b9fac37c21e9f6d7b7","ca5bee4607ddd920729e5c2b4fc89bbc")
