index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("38c813d99d54de6639a80148ff1cfc6acec08066b0912c49576604ed67e9cfaf","8793537b1422beb7d314c65761135b38c63fbdefac6092e93c80191a2e22de91","6a686c39a6d0e11f217ca6fce2ebc45039f2ab34daa69afb548d847ee09561c5","6ac1084e747153b3958df7af09eb71fdeb883385f508a0bec8b983b9a87d729a","5e947d728f25449601414e025ce298c69df1c6c852e3994aa1a2b23c8e8c4db4","a91a66d6abc26041b701bf8da3de4d0f")
