index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73","6c054f9013c71ccb7522c1350995066ef5729371641a639a7e38d09d66320bf4","c3028a3c0c9b037b252c046b1b170116e0edecf8554931445c27f0ddb98785c1","19a4339a4396e17fece5fd5b19639aa773c3bb3d8e2f58ee3b8305b95d969215","05313e81e28f4c4a13e5f443cd2641181d5de95cdc7e450e097ee23c09758a15","80625a787c04188be1992cfa457b11a166e19ff27e5ab499b58e8a7b7d44f2b9","e78505de8436a1d9978fd03a4e374518be6f3f6f7f4bf18ae59e3f23301ce927")
