index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("419bc8196013d7d8c72b060da1a02d202d7e3eb441101f7bcb6d7667871a5c16","5c2fb1c42f007093be5e463f70ee7e7192990b3385a3cbcc71043980efa312e0","6a0017262def9565b504d04318c59f55bea136ac3dd48862d1ae90ff6b963811","b557bf11d82d3d64d028a87584657d25dba0480295ed08447f10c7a579dee048","b3984a2de76eee3ad20c4b13e0c0cbbab2dd6db65e3f6ca34418e79c21cf5c39","e9253218e30b30c8bb690b2ab02eef47b8b5c8991629d814b2af6664151e9a2f")
