index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f77ab04ee56f3cd4845d4a80c5817a7de4f0561d976d87563deab752363a765d","fb3371dd45585763f1436afb7d64c202864d89ee6cbb743efac9dbf1cefcc291","52b11d3fa9206f51c601bd85cb480102fd938894b7274fac3d20915eb3af44f8","85cb8ceda7d2a29bc7c6c96dd279c43559797a624fc15d44da53ca02379afe01","0b95071c657f23d4d8bfa39042ed8ad0a1c1bceb6b265c1237c12c4c0818c248")
