index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("54e3b5a2521a84741dc15810e6fed9d739eb8083cb1fe097cb98b345af24e939","9e42e07073e03bdea4cd978d9e7b44a9574972818593306be1f3dcfdee722238","19ed36f063221e161d740651e6578d50e0d3cacee89d27a6ebed4ab4272585bd","ec16e2de3a55772f5dfac8bf8f5a365600fad40a244a574cbab987515aa40cbf","475d6e80cf4ef70926a65df5551f59e35b71a0e92f0fe4dd28559a9deba60c28")
