index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9b4dfaca873961174ba935fddaf696145afe7bbf5734509f95feb54f3584fd9a","86906b140b019fdedaaba73948d0c8f96a6b1b42","ecbe1b1e30a1f4bffaf1d374014c877f","47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6","261d012caa96d3e3b059a98388f743fb8d39fbd5","20ea405d79b4de1b90de54a442952a45")
