index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("10e720fbcf797a2f40fbaa214b3402df14b7637404e5e91d7651bd13d28a69d8","2260989b5b723b0ccd1293e1ffcc7c0173c171963dfc03e9f6cd2649da8d0d2c","2b0927de637d11d957610dd9a60d11d46eaa3f15770fb474067fb86d93a41912","802342de0448d5c3b3aa6256e1650240ea53c77f8f762968c1abd8c967f9efd0","016d90f337bd55dfcfbba8465a50e2261f0369cd448b4f020215f952a2a06bce")
