index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("078e90c959e3290a4f716fbf4e1d09fe46aaa68b","08d7091b7a9907a6f5894f31cd34e3e8e11cc026","3597915cfbbcc7ea135bf889a89bff635c825e0d","4863a15f85cd0f16ad65434de2122324c04a868a","4e6e8b074943c7fab3206ddb0abf571ffaf68523","9b01d82ceb710df3f51e52a1726b0cda85b47672","ac1d71228114bd95647683e842d42e81a6e97a88","bff95ff87e4081386a6ce6b8289e1524a4a4bd47","e0981369347062ac7f3eb32b833eb4264577e073","f192bb0e141c48e5b0bf46083e30823ea58e8bb3","a19db8716c39454bf363327441dc2e5f46810c30","33c622345804b46d0494f83720fad45ec0df3e97","7a7d57ed5f24772afa07ad24313ace5d84646a49")
