index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c60ac6a6e6e582ab0ecb1fdbd607705b","00141f86063092192baf046fd998a2d1","0885b3153e61caa56117770247be0444","2cda932f5a9dafb0a328d0f9788bd89c","3d13fae5e5febfa2833ce89ea1446607e8282a2699aafd3c8416ed085266e06f","9bf7692f8da52c3707447deb345b5645050de16acf917ae3ba325ea4e5913b37")
