index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("BB93AE0FEE817FE56C31BDC997F3F7D57A48C187","4D1B8791D0715FE316B43FC95BDC335CB31A82CA","2D336978AF261E07B1ECFAF65DC903B239E287A4","F2D04FE529E2D8DAB96242305255CFB84CE81E9C","F8D46895E738254238473D650D99BDC92C34EE44","9267FE0BB6D367FC9186E89EA65B13BAA7418D87","A009A0F5A385683AEA74299CBE6D5429C609F2D2","1316F715D228AE6CC1FBA913C6CC309861F82E14","1275894D8231FE25DB56598DDCF869F88DF5AD8D","9139C89B2B625E2CEEE2CBF72AEF6C5104707A26","082DBCA2C3CA5C5410DE9951A5C681F0C42235C8")
