index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","ee7506ca2761c08fda02c17f1350a86b2d3f6142dffcb7b8f2ebf848ed49b2c5","f27cf31380a9d73f7c757fa02f35a8ee51a71d51f133e67dfdb6ac7230669668","5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3","2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009","714c533967fe9ea1c8ab7a9b31cfa13f0c1ceebcd4bf4d365f9ae8e95764b983","bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c")
