index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("43403eeb7b8ea5705c727a0fff8d714ea3e27449b6b9ba0edd12c666848e2492","85b82f2333b7f9b8c0e12ac86e136c67","032df29c4c01ca8f08fd7e3006a2482b","084270a306e14db5cc8540f3adc8ea1ffa511ba5","c123aff3567852b5fca04ee3cf40195714325ade","185d2a857bf220f849266b717c860f99","d57ea1ea7bbe1894cb161e44bb109f74c8f2338601796b58fa30c2edcdae2017","0f83407aaa82196929c51ff42cba49faad7a4d81","85e2a9aa15a4a75a1d5a6eeb8f72ccb3b8d9a088","4d978a6f806a95c5ee89f8a394ad2a2e4336ad6554922fcde38c46311ac17874","a3f087c21420034bd9544a2d144fbb90ca138afc","06c496e9d53db6b272f4443e85dfc61f934598f70dbcb78c0f0a371bf86888ed","edb799ce59664a93495cddeed72cef6a","79628c79d517656a9238e77d8b1f2bed","464851b14b01e9ca6ff2f6fbc12c3368e3e89bc6f37174742f6a58e20b881d6e")
