index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("36dc2a5bab2665c88ce407d270954d04","989c5de8ce5ca07cc2903098031c7134","7d20fa01a703afa8907e50417d27b0a4","b4f0ca61ab0c55a542f32bd4e66a7dc2","d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53","8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5","3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe","30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a")
