index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8b6c6c007efa8e1a7da241564142f8a8a934dcce451c7e522cdd86292e81ead7","7a92489050089498d6ec05fb7bdfad37da13bb965023d126c41789c5756e4e02","7257b4ccec0ceb27b6fb141ce12c8dfb8a401d3edfaeca12699561eccda5a23e")
