index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("fca8d48afa7e5535fb71fd22225e86602d47dcfa5a4924fcbc33aecd9c945847","16cc7519945bace49ef729e69db7d19e00252f2bd559903e1631c8878c2360f4","e6818bf8c6d20501485fc0cc644d33fcea4bd9a3b45c5d61e98317bda5c080c4","182f94d26de58b8b02ddf7223f95d153b5e907fa103c34ed76cae2c816f865f0","e950c625a94ce9e609778fcc86325530774e45572ff58ebc6549e2627941b5cc")
