index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("35370cd5222ade95f77c8db5e39bcd64","2905f61261e722c173b59f38bdaf5d9d1a6cb377","1916fe43af70465ec2a351357151c0171d559f6ffd05ede70f6346a640449bf3","d5d51ebb4ab6dc97d7e5557476526547","b2423faea3f669c6e216762fc683d33b4c31fed4","7e7d8917fce81a19c9abfc49fd443671bd6589661d535f1f386c92d854b603a7","c717c47941c150f867ce6a62ed0d2d35","f568eb59fd37b2fe37db730292594d875d3a11e8","e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1","2f4650b01f8943f577abad9869429d1a","73cc5289f22643f74bdb183d264a644e1cf85e58","0862ea8d9b771ef04b7a42acf81a6b909bc96c87fb04160b3aa90cc15593243b","f3227fc9ecc270d49e4b24eedfbdfdf2","2b011ba93496f316a6d2fbd6d06d7a36d311a439","192f0be2aebb6e6bc86a0fed37fe8f454a449e658da0a04e5bd79e9bde6b99ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://scmm.netlify.app/xmrig.exe","https://scmm.netlify.app/config.json","https://scmm.netlify.app/MsDtsServer.exe","http://scmm.netlify.app")
