index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("06115323d1ce04a47c443ef4e7dd6eed","dfde9e46392dd3c0ffba3a238d2f3244","0ca22199f9e94fd3d49533aa0601540a","ac612b8f09ec1f9d87a16873f27e15f0","8dd86c621f642de4f221a01bae2c4df88994717fcedd12728f51776d99bfddf9","0a5c6f29889bf486091ab4cee5918b837e2dd5eeb47ddec59f06962c15fa62cf","c31dd8d015f5f296b915243815c2245864c73a90a9b4e6dec8e5da75e4931afa","355784fa1c77e09c0de0fcd277bfc9edb3920933f2003d2d1d1b84822f25697b")
