index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5d060254a6d7eb2cdb2031e29891cb95206757a28fe0d51569eb9f7f55637ac6","79b13d9a52d466a606c37b8f12b2ef7af4e9b53a911b70427c07cb73adb504a1","2e60ed90aa6cefa60cc4cd968213549ddf578dcf6968d8c66366d09c7108ef56","9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb","413c9fcea027f89b9d8905ca6ae96cc099b8886fb3916876a4029e92d56fcb9b","e342802bd53191559af2a23b2d11412a8fe60dc3a50e5efa1fade7067c305f55","51247a58f41ba112ce31ed44b0a68bc4db8f39763250071fe35957d1e3eaf9cb","33fa272ffd2eac92f2a344718fa9bf678703f8194fcfcbc499ab9fefcdab4cca")
