index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8efcecc00763ce9269a01d2b5918873144746c4b203be28c92459f5301927961","421e11a96e810c834dd6b14b515ad7a5401813caa0555ddfb3490c3d82336e3d","beb77e277510c4ff2797a314494606335f158a722cf6533fad62ba5d5789e2d3","074075eda7dde4396fb8aa441031cf88873b969273a9541f25b15fc35ec5ee49","af223370ff0da3c9a9314dc6bf9cb9d9c3a12e2e3c835643edeedad4b4f908fa","c3cb9d0650fcca22a61760fa072336a036a8a5e8eaa61cb72bc4b553a84aedd1")
