index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("107da216ad99b7c0171745fe7f826e51b27b1812d435b55c3ddb801e23137d8f","1f36898228197ee30c7b0ec0e48e804caa6edec33e3a91eeaf7aa2c5bbb9c6e0","610ec163e7b34abd5587616db8dac7e34b1aef68d0260510854d6b3912fb0008","696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473","8f2ea18ed82085574888a03547a020b7009e05ae0ecbf4e9e0b8fe8502059aae","979f9d1e019d9172af73428a1b3cbdff8aec8fdbe0f67cba48971a36f5001da9")
