index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("882546e8fc2dc2fd580170afda20e396","1d413a7c62b48760838bed0d03a35b05","393f78e609af5e77da5ea9ba10facbfb","e223711e31431250946203c27372cd3a","9aac95c3d76319fe3df9fed53fb06507","7442a74c7351b8ab0bb49b778530a95e","404e2fe1fbca70603cb91932664bc112","87c1f6ab7933bce7969f593e3c6096c2","393f78e609af5e77da5ea9ba10facbfb","b5b0ffecc4b30e7f140b517333c6a2d2","546ae7bd8b88289a21ac8d7dc62a3bd7","390a2439581b8c04adace93fed2e4425","7dea7277f672ad85fdf344c467f739eb","667dbfdc01cc6e808b2485c7eed74e97")
