index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("a95737adb2cd7b1af2291d143200a82d8d32a868c64fb4acc542608f56a0aeda","f5d508c816e485e05df5f58450d623dc6bfa35a2a0682c238286d82b4b476fbb","e9a83c8811e7d7a6bf7ea7a656041bcd689687f8b23fa7655b28a8053f67be99","e9bd4a9c6ea27033bcb696e65d7441dc2d42cd7f9f02084b5c704316f0a4fddf","1a7a4b5e7c645316a6ad59e26054a95654615219cc03657d6834c9da7219e99f","72b0da797ea4fc76ba4db6ad131056257965df9b2bcf26ce2189af3dbec5b1fc","ecc5a64d97d4adb41ed9332e4c0f5dc7dc02a64a77817438d27fc31c69f7c1d3","5af88dbdc7f53ba359ddc47c3bcaf3f5fe9bde83211a6ff98556af7e38cda72b","15ffbb8d382cd2ff7b0bd4c87a7c0bffd1541c2fe86865af445123bc0b770d13","85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5","b99c3cc1acbb085c9a895a8c3510f6daaf31f0d2d9ccb8477c7fb7119376f57b","275a9a7b99f3474cbf8a61964a6022e3cf7baf76e0ee2fba31a708d8f1e25bd0","f247a48d3ecdbdf91fcd7a2d8728adaaf06149586adde62de7212c6de645ad58","fdd762192d351cea051c0170840f1d8d171f334f06313a17eba97cacb5f1e6e1","2923eacd0c99a2d385f7c989882b7cca83bff133ecf176fdb411f8d17e7ef265")
