index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("12e28c14bb7f7b9513a02e5857592ad7","3da407c1a30d810aaff9a04dfc1ef5861062ebdf0e6d0f6823ca682ca08c37da","3191cb2e06e9a30792309813793f78b6","0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb","54bbea35b095ddfe9740df97b693627b","61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4")
