index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("69935a1ce0240edf42dbe24535577140601bcf3226fa01e4481682f6de22d192","5f5b8cc4d297c8d46a26732ae47c6ac80338b7be97a078a8e1b6eefd1120a5e5","3f26a13f023ad0dcd7f2aa4e7771bba74910ee227b4b36ff72edc5f07336f115","3e21e547cf94cb07c010fe82d6965e5bd52dbdd9255b4dd164f64addfaa87abb","10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be81","d114a707fc6abbd8060f821893a9ee64dc3b2714","495062eaa63784dad0a098d58892f58deb47ea66","41942e680be29136ce7f1cdc9a15fd43968b0db0","2c7ad0e7897f348bec2e32f2af4282bd65916f8d","0ea36676bd7169bcbf432f721c4edb5fde0a46a9","5d6cba7909980a7b424b133fbac634ac","4ca4f582418b2cc0626700511a6315c0","32ffe48d1a8ced49c53033eb65eff6f3")
