index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1db4f566417ef2dec8218ee0b0fbf682","069eece6f2209672aef8600f15df4bd7ce216a67","e3b6e58f1427d380648f914d32cb69360d93de33c59e01d8f0fa448113e7679","f3e758da9d01cd0dfb433478e5eba178","a9751413af2ec02b01359c9722d782b5c3af31d3","0a508f7722b0df4c8291a7cf0469ca7917ea284bfa8a2e84a3550a85d0628320")
