index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274\n26f5bc698dfec8e771b781dc19941e2d657eb87fe8669e1f75d9e5a1bb4db1db","c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1","6fb41b33304b65e6e35f04e8cc70f7a24cd36e29bbb97266de68afcf113f9a5f")
