index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f49ba791814001b3d4101685bfebb635cdaf3103407a08171bb5d6bbe3e79c77","f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca","589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3","348ee268ef62af51add78b46df9fe8e2bdf41166d19084af75498333e81e6f3b")
