index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ee4abe2bfbb1e212a52a42933c6f0a4361f3e146e9180f07753012da38762253","58b54ac8687169e4f92da3446b433adc39af5820","238412e542f07d53c630929cd3f3c6d3","e030ea871e4ef05f0b9a75f8fc2ef4a1a90a42f46f5ec5f9a7ec199bd49e1e47","4232915f680e8aeaf3a83c08f8f9fd38d00647e2","948ed50640dda430e45bd45880260934","2598dd1019aee192c357567e92f9b45622ad789e60f20ed3df26d32952b3a1ef","cb0679e56e658d8b177e2170222d08ba827ef0d8","dd15e366adb83b9307cfc1d938e7e0bd","2ec633b615864d6a8fc7fd7f1c906f1b6538af5719d671f8459d4a5627be6fa7","b98738b6e0051b4fd730596b4d2dfe2a678b0a2b","ca58c1be5da0d84d1d4616637e351d77")
