index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a5ad3355f55e1a15baefea83ce81d038531af516f47716018b1dedf04f081f15","05ba2df0033e3cd5b987d66b6de545df439d338a20165c0ba96cde8a74e463e5","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98","ddcb0e99f27e79d3536a15e0d51f7f33c38b2ae48677570f36f5e92863db5a96","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
