index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("00411a05a7374d64ce8be4ef85999c1434d867cd8db46c38cd03f76072c91460","b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","a819b4a95f386ae3bd8f0edc64e8e10fae0c21c9ae713b73dfc64033e5a845a1","6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063")
