index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("bd48b5da093a37cfa5e3929c19ac06ce711bd581bc49040e68d2ba0e5610bf71","1d31bea6a065fa20cf41861d21b7ea39979d40126c800ebc87d07adb41fe03f4","f49a5a0f2397609a3fb97728b5a997eb77cfa1b529188403fb5e8adaeac1860b","12e6883046e2c92cbe3b5706ea7f1181b44512f179c7f04e88e75f3f6e392a48")
