index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("00a2e097c53831491975374ef4cdf5b4","013026855baf28301bd7e6e85822e4e5","081b5fb48eab820ccf47065e724cc9b6","11f03aef854cc2032db0771b7b7166fb","169620bc6fb5e9753d913275b2352686")
