index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("bb2b1cd32cfa51137d5ede0892f76223","1e31b1bd8d72677498f9c4800c5321fa0c1d3b5d","3dc6414f1c8447a3a73a713d660bc7b7ab809a54fd4a1b7543c874b81d2aea74","5dee06e2307259c4628b8ae213c80492","6b28a335a52d05fd5d16f419a78d0291156e2143","ed746438d971e50835c87707945102a52e1fe763fcb576869e08807d425f9511")
