index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("de0b74917fe24c2b38e2d1172b7352f88bf8b3df64b6d44ca5f317db85aeb324","70257c48ed8e1a3b57a7d6a5bed17837f60d630bdda0b22b048a3721569fe038","7d294c60c44b8b776c45e46e904a2de70ff4820e7e7863adb9f191c6554f9fb5","74b5a0ed14c7b8e26d51d4b9242e73686bad2e63cd11d9cbdb52e08fa34158c1")
