index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b","f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3","06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153","e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42","1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b","1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63","dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053","8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873","01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916")
