index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0b2b9a2ac4bff81847b332af18a8e0705075166a137ab248e4d9b5cbd8b960df","80ed7984a42570d94cd1b6dcd89f95e3175a5c4247ac245c817928dd07fc9540","bee2fe0647d0ec9f2f0aa5f784b122aaeba0cddb39b08e3ea19dd4cdb90e53f9","a5b9ac1d0350341764f877f5c4249151981200df0769a38386f6b7c8ca6f9c7a","607a2ce7dc2252e9e582e757bbfa2f18e3f3864cb4267cd07129f4b9a241300b","11b2b719d6bffae3ab1e0f8191d70aa1bade7f599aeadb7358f722458a21b530","cd28c7a63f91a20ec4045cf40ff0f93b336565bd504c9534be857e971b4e80ee","ebe926f37e7188a6f0cc85744376cdc672e495607f85ba3cbee6980049951889","3ea2bf2a6b039071b890f03b5987d9135fe4c036fb77f477f1820c34b341644e","7e9cf2a2dd3edac92175a3eb1355c0f5f05f47b7798e206b470637c5303ac79f","bb48438e2ed47ab692d1754305df664cda6c518754ef9a58fb5fa8545f5bfb9b")
