index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ad9f5183aa8d792ed1bc991ab3ac9b0cd4160fd9276071a7e63e7d7b4e3481b8","6f435a3f209c09d8f7cf180f759a5faa2ff215edc1afce2cd62078574bb70c69","556bfea997880f1365d3822d26ea57e2cfaecb231128ea1e7e50ad1f778147bb","c43148103e24a16d59896d6db395ed66a2cd5772ff308dfea10aa36b7f433589")
