index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("10efa7fe69e43c189033006010611e84394569571c4f08ea1735073d6433be8","2d841cb153bebcfdee5c54472b017af2","7a791d4d7e55d7a2fdc08ac0f22ab7ae068fdf26","29a41174eb9a39e0ad712ed5063c561e9c2e1db1f8f6b04b2ca369a6efc3ac9b","45b79949276c9cb9cf5dc72597dc1006","191e16b564c66b3db67f837e1dc5eac98ff9b9ef","9bb7addd96f99a29658aca9800b66046823c5ef0755e29012983db6f06a999cf","85c5b6c408e4bdb87da6764a75008adf","5ce46efc6b28bd94955138833dc97916957dbde1","83ca636253fd1eb898b244855838e2281f257bbe8ead428b69528fc50b60ae9c","8849a3273e0362c45b4928375d196714224ec22cb1d2df5d029bf57349860347")
