index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f81119463698080e40f136551e0db0c7e8c0115de60c25bcad30fcf5f678b336","4e268a645718f848ec99d69e6306ae33dad36862","643eb5bf150c559a60a900cebaabf936","0c10cf1b1640c9c845080f460ee69392bfaac981a4407b607e8e30d2ddf903e8","eb563ab4caca7e19bdeee807b025ab2d54e23624","ad49374e3c72613023fe420f0d6010d9")
