index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("16bd34c3f00288e46d8e3fdb67916aa7c68d8a0622f2c76c57112dae36c76875885b04081bd89f5e23cbc59723052601","6d515dafef42a5648754de3c0fa6adfcb8b57af1c1d69e629b0d840dab7f91ec62d3ff36ec8a721488e512e1c94b2744","abc348d3cc40521afc165aa6dc2d66fd9e654d91e3d66461724ac9490030697fa04d2c0aa0a798047161118b5d5816aa")
