index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("94d94d219a765eee921f4bcb7c0d64e2","7ead2e16aebb534d2ce4bf83b6fd258a","2bd6a5025d687950045332deed99caa8","c7a8e2674a1d5d89a7c423016ba2425c07257c3c","42f24ae8d292ccb9a5190b1e112f755a121694b3","e01f4ee45ce8261ef7b21d8c809adc32d56773ff","bdad79b21dd4fda793fa9f1cd245069cd58369e82dfb25eb32876a7f4a8a960d","96c75efac857c35782757589bbcea6e04fe747c3ec52d64e2f626515d3b40fd7","bb15cebe296a1374cb34b272cfd34eb441748c239b6aaecf408df2cd4d483684")
