index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8939bfe20bc6476806d22c8edfcaba5c36f936b893b3de1c847558502654c82f","1940fcdb2561c2f7b82f6c44d22a9906e5ffec2438d5dadfe88d1608f5f03c33","506e8753dd5ca1c8387be32f26367e26f242b7c65e61203f7f926506c04163aa","8a10e0dc4994268ea33baecd5e89d1e2ddabef30afa09961257a4329669e857a","bec9d2dcd9565bb245f5c8beca4db627390bcb4699dd5da192cc8aba895e0e6a","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4")
