index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("381a3c6c7e119f58dfde6f03a9890353a20badfa1bfa7c38ede62c6b0692103c","1cffaf3be725d1514c87c328ca578d5df1a86ea3b488e9586f9db89d992da5c4","844e902977b478eace8568f49dd9e5c91db8e534f3c5410ee663d0be02bdf7e3","a0c3e6cd167b93f4646a7a3f2d46ed8bd4888d861b533662a66ca9711d49db1f","cf160175c661efd4b1e1eecadf5f00f7203ef4c7445e36e3373d50b26086c552")
