index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("2421e2d7ed44911ce2d2f2d288a33c8650a2e5847d81b02911e3da31c292d03a","37563d85d00f66f27dfbdea1978227cccb739702aca826a9bdf671fd26d6b6a4","3d5e76babb87991d4abec7c048b34074ccc7c680f49639e0c55e5be0ee6df33d","8ee8a12754f344d0a1249f2de4d11044ebba8ba354df769d8d5019a639bb69c6","92dabfde91df07a3b2105e5972fbd2f5acf64b53465b60165a53e0795c1be8ba","bce00edede51b68cbf740e51b9f184bfd003d6ccb682cdcc661ecaa82dd67e42","c4952d905a0fb0466d45a58606635f0a2ac3b7c5cbb7e517118a9b695e3012e2","f1a126ea617a045454badfb230b3bc86ee5c1ad5698c1285472f71fc8497cbfc","3d8c723ceeaf346e9ea31d5449f4cbc37cf58993296a689d471c1e617a19d046","8d0c4f891f01840c2a9c6483554d661440bb6a81fe86f10d546c697fb9e958a5","774e4d4af9175367bc3c7e08f4765778c58f1c66b46df88484a6aa829726f570","482a4763c8cf9c448fc851e6fe4554cc48abc563c49847ed040cdaee8a12003c","1e862e875511f28643f75cb7a59e2d4ad642bd9aed4a328a9cbb5304d12aa83e","819448a878bbdc0658257296ab0f4951f1536ec7a1e20f1fd3b19ed716cada88","3652342b1e8b67e1700c3ed428dcc7b7f9f32984ea296f7dcf544b7b50493dc3","c62ef09ac5b47ea517047fd3719bb2e93b37b97f4c7477198c4b4d2383c227b6","4dc5cd716d199967111e2a35aa260f336ea63d9f56619ca468ac80145f2fbe15")
