index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ad5002c8a4621efbd354d58a71427c157e4b2805cb86f434d724fc77068f1c40","8c5b108eab6a397bed4c099f13eed52aeeec37cc214423bde07544b44a62e74a","78517fb07ee5292da627c234b26b555413a459f8d7a9641e4a9fcc1099f06a3d","9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732","df492b4cc7f644ad3e795155926d1fc8ece7327c0c5c8ea45561f24f5110ce54","029dde7c2ec880fb3d3e95e6a8376739b4bc46a0ce24012e064b904e6ecb672c","72f0981f18b969db2781e874d249d8003c07f99786e217f84cf54a148de259cc","18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","ed6275195cf9fd758fb7f8bce868c14dc9e9d6b7aa6f472f714bce5ed7fabf7f","5799d554307906e92749a0c45f21baff28d83b1cedccbf7cb6f2b98ac1b00930")
