index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("93d048364909018a492c8f709d385438","94034e04636bc4450273b50b07b45f636ff59b05","4149b07d9fdcd04b34efa0a64e47a1b9581ff9d1f670ea552b7c93fb66199b5f")
