index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("25828b12203bb53e5f9bc54d2f8507a7","4bfe301715d6564404f6ebd56156c668329cc83b","53a2fe036f8def7b4372246ffa7835f97cdeb17268e7c8df9756f42baf28cc0f","c01c7298103bd2adaf432a807c65d2eccfbed9ce820d80424d03accdceb9c801167f65cfb93ea1b5677fdbf8235e34de061a449f03fd45d58fd913dce139aa51")
