index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ab913c26832cd6e038625e30ebd38ec2","719873f61eeb769493ac17d61603a6023a3db6dd","1283c477e094db7af7d912ba115c77c96223208c03841768378a10d1819422f2","0b75113f8a78dcc1dea18d0e9aabc10a","269e61eed692911c3a886a108374e2a6d155c8d1","808385d902d8472046e5899237e965d8087da09d623149ba38b3814659689906","661842995f7fdd2e61667dbc2f019ff3","1a638a81b9135340bc7d1f5e7eae5f3f06667a42","4569670aca0cc480903b07c7026544e7e15b3f293e7c1533273c90153c46cc87")
