index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c60ead92cd376b689d1b4450f2578b36ea0bf64f3963cfa5546279fa4424c2a5","7d51e5cc51c43da5deae5fbc2dce9b85c0656c465bb25ab6bd063a503c1806a9","41a9784f8787ed86f1e5d20f9895059dac7a030d8d6e426b9ddcaf547c3393aa","6b311c0a977d21e772ac4e99762234da852bbf84293386fbe78622a96c0b052f")
