index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0447c931bb8efc6dc531f69a891f2a0f28a85a18b25e04366fdb59bf827b2eb1","31208a2640c1f2806d21bb8b40abd47b24dd3be85dedb1fdb9f33dac47b23152","9b5f1ec1ca04344582d1eca400b4a21dfff89bc650aba4715edd7efb089d8141","b3a994f26b694fcfdc68e57fc6aeea2aa4b4906ff50b0319e00c693537a3b25c","f8935a295a316e15f60fadf465383f19cf881a42ba008ed1792cbeecb21580dc")
