index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90","5b6c3d277711d9f847be59b16fd08390fc07d3b27c7c6804e2170f456e9f1173","7883f01096db9bcf090c2317749b6873036c27ba92451b212b8645770e1f0b8a","ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e","b3661c6fecf46e6a7b96b3debc7efa65633bfde2f156392ff6506736457361be","5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa")
