index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("2980e20c2f263ebe1acbce98d04f9a34","447dccea5b40940523db7c62f3b5ea1d7d99fb9cdc68c8c090fa11632be51b95","281670cbc3bd5f20950d5caa3810998c","e5992503cad2a2ef71b6253716ac58f842a2f0099b1d70286f17beae37842d79","ce2d5f5d812c192e3b61330b93921c2d","4248434dc14209d2f10a5c2a2f1cdde44aea2f43c8798cf5c7e7d14a8f124e9c","13ff21470b63470978e08e4933eb8e56","16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a")
