index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("a8c1c8f015b17efaa454a30f94634177","715b5c17d2fba2f993c9ff4d8c433ce0","f135803381618638b68506450fca1797","07d15974cd8ee4331b4df426ad1146b6","d3280c8db77e7d70bc80ad58e875dcf5","416bacd4cbf6e717ff02d06f92be0586dec5f5fe","1335cc789cbee8c39d1d876aff708dce7ee1ea9a","c2311e46f1deb8213cb155ff8a68fac30eb6766c","a597b1d0e85bbb4dde32ed4a6106ef27f747fd96","e344a0bc5e42fba4ee4bd89827b46642481fb67c","383734f46f2f29f9111af90cdf9dc3b3e6ea2e23e238a235f46fe487db8cada6","d8ca3cfa462dbf3e92ac8ca9e8fb6bd68c8074884a13a317b1bbb0f5f2618db8","bf38a350365e6dc02b2b906e330c8cea297a1ad89e752c50b4a0a201e79a7600","d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba","adbf66605a6b569b3b4e915ad9cdf271c0889a14fc59b70233b2c966fca1dc93")
