index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("051351f4257d7f87bede9b72455aae5a5b9a8269bfb4bcbecb1501f7a3409957\n759c496b114f9212c610892c5236935cced564a78b3b410bd2d27c9ee6257f42\n52ab96b1d99964502a7946eef39a5f636d8a240c747d43f8568d62cf0e960ae9\n7a96d9f7a25a67ec2873bb814cb0ba104d3b7c1651f65ff09d8e1f76cba6fb79\nfd452da0d978514adaeee1dd5227212aad00bf07f2481d335eed77a4ee08a5e8\n3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab")
