index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c6ef53740f2011825dd531fc65d6eba92f87d0ed1b30207a9694c0218c10d6e0","a72538ba00dc95190d6919756ffce74f0b3cf60db387c6c9281a0dc892ded802","77f6cdf03ba70367c93ac194604175e2bd1239a29bc66da50b5754b7adbe8ae4","0faa970001791cb0013416177cefebb25fbff543859bd81536a3096ee8e79127","Fe7a64dad14fe240aa026e57615fc3a22a7f5ba1dd55d675b1d2072f6262a1","08CD6983F183EF65EABD073C01F137A913282504E2502AC34A1BE3E599AC386B")
