index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("1beb8fb1b6283dc7fffedcc2f058836d895d92b2fb2c37d982714af648994fed","77373ee9869b492de0db2462efd5d3eff910b227e53d238fae16ad011826388a","693ea9f0837c9e0c0413da6198b6316a6ca6dfd9f4d3db71664d2270a65bcf38","48e18db10bf9fa0033affaed849f053bd20c59b32b71855d1cc72f613d0cac4b")
