index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("6b8cd32010895abeebbe3f8acfc9718748dfaa7b6a6a5994178b5b1712121c02","dce6b152b3a0a2aef99b6b837813d9bb8335d4de7555af0e175c84a137380dd5","afadf2ba580bb4b4ebf838defaa64f03da77b6a0418f9fab29fea55558ebfcf7","d8fcaf8be0aa2646663d12005285f5afc10a2ed324fc963b50adcd79802a716a")
