index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("6125dd568bad941f51594004a00da31d4a2120ce86ad54b18916c335df2e97db","47c8dd805d24d3cabe6fab5ed775fe24d4d8a3b62fdbb60895b8fc40263a44d5","a29bdd1745b827d672f1de43f3105bd3841d673cc27cc8737944eb1d1750db2b","849e8f1223341487bdcd95ceb0036093b632a9b9b6e09840ec2aa68d409ee74e","eac15b0fe13853bb0677b2d34a7dd219818b77a910d1ce50df4930fb6bd1c7bd","6622beb811233e561a0181260cf50b997dd6ff524c1cd0db35d8b86d922467e6","4345f7bb97b4c48a25e408735739a92fadd64ecfdc8a7761f0a497ed4b23b1b0")
