index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ef3ea4dc2d3ba466e40b8cc5e2b20cb026cf7936","1a8a8fa87aff26fc2b269846f0f0d5be588bc6ee","99537ef2edffcebe6ebe88cc5d3d9420d397e89c","8093060aa8cea40a790ea0538c14bb11f3a02cd0","395d592b52c2947dd6bff455725a3c4204f41bb4","d6e03a4023a3759cd28eb85c909bc17af4b78b7e","a324176ef05a03a244220072f9f1eb168e4ffa89","97d9fff201c71ef13bb1b2a7dcd442c59a94e5e0","a4ac448a83865bbe7f62f5dad56143f1d5d0b526","3576ccdd8fdde01a6d55c62f45aa8960a479ebee","301088fc087f4ae61427a4515b3b822372a9d50f","aa02262de80a31b50efdf0a84c9915ca43696389","82ce0491e2415fa8ab8d75faa26adc2278855507","36f4b2e3d1f0e0e791e44178b41c9e53eb1898b5","61122f4857ae5c358cee5a79232b6f1b6213025a","c29938c79fd7fb0dcd3b646df136333e0ae62fda","ebb5b9d0d5416c5eaa0a3b00e9115ac7ed5839d6")
