index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9c5898b1b354b139794f10594e84e94e991971a54d179b2e9f746319ffac56aa","7c37b8dd32365d41856692584f4c8e943610cda04c16fe06b47ed2d1e5c6415e","fb808be98b583a2004b0af7b6f4bf5e3419d8b6a385c5ce4e8fab4ddc0b48428","8eb65b4895a90d343f23f9228e0d53af62de3dab","6181206d06ce28c1bcdb887e547193fe","becfe83392d83ef8c743ea00711a25c8")
