index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("d79ac5762e68b8f19146c78c85b72d5e","899c8c030a88ebcc0b3e8482fbfe31e59d095641","cb83a65a625a69bbae22d7dd87686dc2be8bd8a1f8bb40e318e20bc2a6c32a8e","a4a09d3d5905910ad2a207522dcec67c","8e7984a0af138aac5427b785e4385cdc6b9b8963","197ee022aa311568cd98fee15baf2ee1a2f10ab32a6123b481a04ead41e80eee","b6cb21060e11c251ed52d92e83cbcf42","b2a3d6a620c050fd03f1e16649c6b5bfdc195089","9887e7a708b4fc3a91114f78ebfd8dcc2d5149fd9c3657872056ca3e5087626d","21930abbbb06588edf0240cc60302143","48bf9b838ecb90b8389a0c50b301acc32b44b53e","8760c4b4cc8fdcd144651d5ba02195d238950d3b70abd7d7e1e2d42b6bda9751","a8c071f4d69627f581fa15495218bff7","25beb06d731192ea20bc7eb0c81ae952f2a0bd33","c992296a35528b12b39052e8dedc74d42c6d96e5e63c0ac0ad9a5545ce4e8d7e")
