index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5e5276abac4f39ed674c8783d12212dc","c055b968ae48bd35342a4aebfe6195e67529d84e","c59559275fb8af4bbc59d47c267a94fbe44151e40a8606414d1b1f76a99852b1","743ea515bb5bab8929c6d280a3d0feaa","58326656b86f43fdaa65b5493da1cb13e7cf6a2d","887cabc0d136a86a6be444883b62c90d073fd1f839896840233150475bd149c8","460834754a0e145320380e54400b9509","992c119799b3b3899263605930bf9fc2b656afe8","a843517b019e86af42252b568e06dfe91a22f9034ceb996f5b0df32dcc1e4274","86a9edac11733b9985d977b330389593","79c0f5242a3a95beeddd2761c092ed166332707c","db61b7e783969a2050c9e18b667c2a7d418d757a0c986183b8ef2f6e6eccaa48")
