index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("33eeeb25f834e0b180f960ecb9518ea0","b93eb0a48c91a53bda6a1a074a4b431e","ac34ba84a5054cd701efad5dd14645c9","0bf7c0d8e3e02a6b879efab5deab013c","c44487ce1827ce26ac4699432d15b42a","742c2400f2de964d0cce4a8dabadd708","51014c0c06acdd80f9ae4469e7d30a9e","3b03324537327811bbbaff4aafa4d75b","245fb739c4cb3c944c11ef43cddd8d57","1b37dc212e98a04576aac40d7ce7d06a","26f59bb93f02d5a65538981bbc2da9cc","03a63c096b9757439264b57e4fdf49d1","57850a4490a6afd1ef682eb93ea45e65","fade75edbf62291fbb99c937afc9792c","b951e50264f9c5244592dfb0a859ec41","803df907d936e08fbbd06020c411be93","b951e50264f9c5244592dfb0a859ec41")
