index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5f99214d68883e91f586e85d8db96deda5ca54af","8917af3878fa49fe4ec930230b881ff0ae8d19c9","14177730443c70aefeeda3162b324fdedf9cf9e0","a996ccd0d58125bf299e89f4c03ff37afdab33fc")
