index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("49a4a453b10715f0ed0ab3775dce76d8","02185d0a044ea18112be72851a73fcca","853aa4af73e25df257689eb342a1923d","e67f242091860b7a64300651ab4359e4","e64ae2dff64a2e18875f5248c56b7c6f","9b5e538812ab1c5dc502ebe9330b4a62","33993f645556198f3724b210b9ad2228","88c69bd369d3400efcb517ad799f5e32","252f380bf8e8c2645e481c43e08b6c85b8f1c339","d7fa82818c7f1faf9574d19d31101c5293ca68dd","893439ca04be9d12547d7c3f4197af5d8612eda3","9b33f0ac861c57ab6a9b2946258f159f3e911bce","f7bd5da02f3e104aa685048880d28f27931dc4cd","780fba5e22cb92f6906ad33ed4d7f890e78342d0","912cab83a15d067877ad7a80ab90ef9e669f7725","53d42c1df7ed8893d2a1491cf89e8fa061ec7ce060bc14d608c67e7513676d7f","ae544ff7385af2dcb57ecb1e3193048a59639e203334b90c5b29dc96730b08ed","7a8dfcce30251df692872feb4866f07c624e19f98099f09cfd15574ad9f6b0e1","eca183e681b7a976601f2d96253f154c77eec2df262a903546bb65cb9d561944","3971e2cdb79b64d0b38c68a255e2f5196766167891c1f798d30eb1a43ffbc343","5fd9e6269ec291e5691bd814f0636c579c8a16b0790d65228e84ca75677062db","0e0c060684d89eb04ea7c4a4a07887fbe119ec1ff7574bf085517ad7989b04ef","0e8cb823c8ba1ada61cba424709028a306f54ff596292070e0d00b4dea94799c")
