index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e2a4a40fe8c8823ed5a73cdc9a8fa9b9","e7a157ba1819d7af9a5f66aa9e161cce68d20792d117a90332ff797cbbd8aaa5","ec8dfde2126a937a65454323418e28da","21c5d3ef06d8cff43816a10a37ba1804a764b7b31fe1eb3b82c144515297875f","b257f83495996b9a79d174d60dc02caa","b2d667caa6f3deec506e27a5f40971cb344b6edcfe6182002f1e91ce9167327f","dd94daef4081f63cf4751c3689045213","abe5c5bb02865ac405e08438642fcd0d38abd949a18341fc79d2e8715f0f6e42")
