index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012","083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120","503b3ece42f540409bcb2f0abc7584e557a0d120b7ba9854b4548496b2546d34","98d1a10521a4dd968d75e2860e523311b5851737795c84943c380870794c851a","f9a9c1a13ed74aebca0652b102755833fc084e221d731b5e7ae76ff136f85864")
