index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ff1b6bb151cf9f671c929a4cbdb64d86","7bdbd180c081fa63ca94f9c22c457376","c16df0bfc6fda86dbfa8948a566d32c1","bbcf7a68f4164a9f5f5cb2d9f30d9790","2915b3f8b703eb744fc54c81f4a9c67f","0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647","7b3ec2365a64d9a9b2452c22e82e6d6ce2bb6dbc06c6720951c9570a5cd46fe5","e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91")
