index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("250a23219a576180547734430d71b0e6","d675958d39e44b310e4e57f4e4f9bc12","0fa83ec90f3f0d0cbab106e69f6dce52","2c54fad7d4632a1a94608444cc2acf38","7b76b698e90df66d4f4bbecf24c95325","8594ed7991a1a041764344a5713ef7d4")
