index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8c4daf5e4ced10c3b7fd7c17c7c75a158f08867aeb6bccab6da116affa424a89","e74dac040ec85d4812b479647e11c3382ca22d6512541e8b42cf8f9fbc7b4af6","32abb4c0a362618d783c2e6ee2efb4ffe59a2a1000dadc1a6c6da95146c52881","5b46be0364d317ccd66df41bea068962d3aae032ec0c8547613ae2301efa75d6")
