index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5b1e8455291d99a1724327b9a7fc2616","b69984cbf52b418673bd08279ca845d6","5217b8552321556ea434474377cfcd02","bfd6286bb39a0e24a2af28c63bd8e194","75bfb7d5199bf0c4e62525099b33e14f","f68ef9e40462c9760bf9c829edd9f4a9")
