index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5fb0c8f3daef02b9d2ab285d0bf348cf1cb7c36708b0034ad0dee4998a16b9e9","cc8b2f14c44c0bb86b7233afeb20134e01f84a83","bd0ad51f62599fe31d3b98a6640f7fc0")
