index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("fef7b5df28973ecf8e8ceffa8777498a36f3a7ca1b4720b23d0df18c53628c40","f78b7b0faf819328f72a7181ed8cc52890fedcd9bf612700d7b398f1b9d77ab6","dc1dd648287bb526f11ebacf31edd06089f50c551f7724b98183b10ab339fe2b","df8f37cb2f20ebd8f22e866ee0e25be7d3731e4d2af210f127018e2267c73065","b3e8497a4cf00489632e54e2512c05d9c80288c2164019d53615dd53c0977fa7","36e0e1e4746d0db1f52aff101a103ecfb0414c8c04844521867ef83466c75340")
