index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("7bf7550ae929d6fea87140ab70e6444250581c87a990e74c1cd7f0df5661575b","a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91","f5e908f1fac5f98ec63e3ec355ef6279","7bdbd180c081fa63ca94f9c22c457376","1c25a55f121d4fe4344914e4d5c89747b838506090717f3fb749852b2d8109b6","4c9a8e82a41a41323d941391767f63f7","9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507","2915b3f8b703eb744fc54c81f4a9c67f")
