index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b8a4c1792ce2ec15611932437a4a1a7e43b7c3783870afebf6eae043bcfade30","a3fe80540363ee2f1216ec3d01209d7c517f6e749004c91901494fb94852332b","01ca7070bbe4bfa6254886f8599d6ce9537bafcbab6663f1f41bfc43f2ee370e","7248d66dea78a73b9b80b528d7e9f53bae7a77bad974ededeeb16c33b14b9c56","e68ff1087c45a1711c3037dad427733ccb1211634d070b03cb3a3c7e836d210f","f47f78b5eef672e8e1bd0f26fb4aa699dec113d6225e2fcbd57129d6dada7def","9a4bc647c09775ed633c134643d18a0be8f37c21afa3c0f8adf41e038695643e","a75399f9492a8d2683d4406fa3e1320e84010b3affdff0b8f2444ac33ce3e690")
