index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b93d649e73c21efea10d4d811b711316206c0509","cd19c2741261de97e91943148ba8c0863567b461","885a734c7869b52aa125674cb430199b2645cda0","e8bb26f62983055cfb602aa39a89998e8f512466","dc8b9bc46f1d23779d3835f2b3648c21f4cf6151","9290478cda302b9535702af3a1dada25818ad9ce","76fb0d08fd5b9c52cb9da118ce5561cc0462555f","048b3942c715c6bff15c94cdc0bb4414dbab9e07","091f4bddea8bf443bc8703730f15b21f7ccf00e9","ee827023780964574f28c6ba333d800b73eae5c4","74e4b2f7abf9dbd376372c9b05b26b02c2872e4b","29f16c046a344e0d0adfea80d5d7958d6b6b8cfa","933ad0a7d9db57b92144840d838f7b10356c7e51","71ed640ebd8377f52bda4968398c62c97ae1c3ed","3b1a2847e006007626ced901e402f1a33bb800c7")
