index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9EF3B6FAAB18ECB56E819A6B1B6063CAF99666D8003A67E55690F27EF92C2B56","0F61D8DF7F7A7CEE9DF293A29BDAB2FDE014E4C88A6F6C6DBD4663FBA358B5DE","49573D2DD461F5DA5AF15054955D2F4D0C4EB7B67FE77FE91143E46F09818C41","59AE31338EAFC6F64D372BE1DFF702A6870663443B33E62BFDA1DB2E9918ED00")
