index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("58ba30052d249805caae0107a0e2a5a3cb85f3000ba5479fafb7767e2a5a78f3","3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0","cf87a44c575d391df668123b05c207eef04b91e54300d1cbbec2f48f5209d4a4","765d84ae85561bf5dbc1187da2b2cef91da9f222bcc6cf2c12cacd36e44bcffd","1c2d7f19f8c12e055e1ba8cdf5334e6cb5510847783fbe36121a35ad70f09eb3","9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c","4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1","075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85","bd93d88cb70f1e33ff83de4d084bb2b247d0b2a9cec61ae45745f2da85ca82d2")
