index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("ad07ffab86a42b4befaf7858318480a556a2e7c272604c3f1dcae0782339482e","e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b","3746217c25d96bb7efe790fa78a73c6a61d4a99a8e51ae4c613efbb5be18c7b4","b13d2ecb8b7fe2db43b641c30a7ca0f8b66f4fadb92401582ac2f8cc3f21a470")
