index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("32c7b6629fabe6254431a558b57d30cd2f2d43d7","ceac85ddbee2917d1a95a892a983a512d4bfabfa","7559b01635160193755a6abb7cf36f4a5174f0e2","0d297ceb76429ea996a1cbe199c277252afad300","cacaeb37ccbdb310ee0148257877f4908b95c53c","5ea768e5c44a65035dbdac66d12ab68a94361962","dadfc0247ecf32011667d707e37caf827cd522c8","a3adba5c8d41b4c5f63e209317740daf6330dfc6","f6f6f1151cd9e8f37b6b5be07da13dd19d05397e","03075c91d9c57e7051af49d840a2ef2e935b634b","d31df5ea0f82784c010a16597675937fc4896cb0","a3e83d122c7f8206091d81fb584897cdc4677d88","b0115cb4807e9d84b6b73804bd7e88a9b0ee060e")
