index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("8bd9925f7b7663ca2fcb305870248bd5de0c684342c364c24ef24bffbcdecd8b","3b3a096a9c507529919f92154f682490fa8e135f3460549a917cf23113a7b828","8bb868a4bd9ed5e540c3d6717b0baa1cd831fc520ee02889bc55e2aac66d9d34","cea94fd48ef98f6e9db120cdb33fa1099846ebcf9e6d6f8de3b53250d2087f0a","8af7fc21bc9c13d877f598886f363a4c7c1105bcda18e17db74d7e1584a9cae2","abe96669d90f52529b5dad847f43961a4b8b56c3893f6233a404b688c5a6069e","44778cf0de10af616ef2d8a5cc5048f7cf0faa204563eab590a1a9ea4a168ef7")
