index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("06861c22056919216f925892334ba29b4a2848a7a09c3611540b16e993fd6cc3","b0df9f1c67b830d5c4e2c88565e6c12b08a6634a3c1d234627ffa95fb5e8bcef","a78f4a4937ee5aca61d66bc5168b6becbd7c273a37e0ec5f8a42818ac61e1e34","eb1b278b91a8f183f9749948abd9556ec21b03ca852c53e423d824d5d7cc3de4","939b9b93cbf54628c83752a971bcfb267d63cc389ca1d5b77705903111e0d631","43142ccb51cf329049dec3bf9adf61bfad0fb35d6e8ec3c9fafae70dfe292adf","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","ffcf926b44c43f31a57c0ba2a1b535163473d4cadf9f726092ebd95bcf648d14","8029acfb8350117145762edd84ffab625bc736e12cfce7ce8f0f4030b184d904","863c2115f7aa27523647b180bc797584e70b21c7bc14bb4ef4de7ea88dd99c9c","0898135879ff775f9560047ee2765a6884ee10d638e9d9eea0e7631296064701","6ac47904238560a22de6477456a29ddea3d6305dd2139a4904f10b514f7b3915","0b28bef2023439d3ca54c01dcbaa30d6230e470faffb02e977463956043386bb","66c6b1c04611ef6f1b14396389fd5796c98b68e3ae6a7681820b5620741e3763","0ae9e97597303e2d69bfebdd64f27b6629ba6931a76f29f063bffddb8d622ae","eb2d349d4b813c08515a591467a4c65941a9cd24fd1506d104f42441756c45af","d3296b9723051094ff8accbc2f17698cae38f2e9e7f9b48cee0199e50b217396","7de6187a1c41cdf3a47687ea6314f169963a95d549f423574ae35e5e7cb365a1","8a4c38d46ba4bcc5b1fde66a52da48d627e24a9581ccac9d7e976d7d471a608e","60806dd1966a76f87024f2d254075b84cd0a50bdc0d455067afa772102201220","aad7206fa738212ad0e0f0876013b0d3c93e982a85b82525c77e7e0f98755abe","d4621052983ccebeaf3a92d671b88d1d4e9a2a4cc6107e87c77da3e142118128","9ba8d6f7f689ee5529843812d6feb574af10a8fba81c3434128b8a468e040552","be9936ef11fec2b2b9823c3d66d1e02f46bcad6850b080a34e14af9b279d6262")
