index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0f0c13f3c284450bf1c91a966a022413","682ef4f2b66b1e447701fecfad15094c","f2d0cf04b5a01eef067a2030e429a4f1","7869d873024c75567eecc7c517b5eb21654611fb","da874c18988b8fbceb21f2587bf8b6086fdf3d7f","5a1300b883a22a46158d284ba5708f6667d78c89","c78af0e1008bbb8e3738d76bef6705597b88449874533685fe21bf32ff0be4b6","b818d7eb5500a02415a177d9a8934d7d9d20f0e46f849b3a2539cfe4f1114120","90f9e744628994db2e2331cab581ea890ffe3885be7d802f350c47a776428038")
