index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6c172f7329eb3d18eb59de21aa065ee4","12b61e975fa830fee6ea04e66cb07b5db6c4477b","6d269bc0b0a986e6e437bc9a33c6c95a","47e45dd7e64fe23dd9cb88a3545cee7b9014239c","c179251bae0044413c32b224895bf103","b6d646d9ae87eefc4dc271f3e0419f43bdb2c94f","b1422ef3148f49247b207d4c167cc54c6d3c65d408910470b252ea178eaa66c8","8cc10fff94267bd402ef92cf0e886120803a3d46f90e821bc28fe0f5b2606082","7b09df73e2551317e2547391361b579899cfcfd3304aab7fe4808858822be3f4")
