index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb","47c7cee3d76106279c4c28ad1de3c833c1ba0a2ec56b0150586c7e8480ccae57","75404543de25513b376f097ceb383e8efb9c9b95da8945fd4aa37c7b2f226212","99df8090cf89d6e3ce4316d24c6c00e499c8557a2e09d61c00c11986","7a6df63d883bbccb315986c2cfb76570335abf84fafbefce047d126b32234af8","7dea671be77a2ca5772b86cf8831b02bff0567bce6a3ae023825aa40354f8aca","c59f3c8d61d940b56436c14bc148c1fe98862921b8f7bad97fbc96b31d71193c","e652051fe47d784f6f85dc00adca1c15a8c7a40f1e5772e6a95281d8bf3d5c74","e8d5ad0bf292c42a9185bb1251c7e763d16614c180071b01da742972999b95da")
