index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e7065ef6d0cf45443def30d3a3a35fd7300c4a56","31672b52259b4d514e68da5d199225fcfa72352b","b71070f9adb17c942cb692566e6020acca93726a","d7561594c7478c4fe37c26684005268eb582e13b","47af4cfc9b250ac4ae8cdd0a2d2304d7cf60aace","2963af32ab4d497cb41fc85e54a9e5312d28bcde","5dab001a2025aa91d278163f39e7504004354f01","d88b10e4fd487bfcca6a711a9e33bb153674c757","f0295f2e46cebffaf7892a5b33ba54122781c20b","3c0a0ec8fe9eb3e5dab2018e94ceb4e29fd8dd33","9b5af677e565ffd4b15dee283d46c2e60e1e31d8","738cfbe52cff57098818857930a7c1cf01db0519","843ce8848bceeef16d07041a97417882dbacb93f")
