index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("05cbfc994e6f084f536cdcf3f93e476f","4c6daef71ae1db6c6e790fca5974f1ca","70e51709238385fd30ab427eb82e0836","7d937e196962e3ebbbdee6d3a002f0cf","e5d6c58d17ebce8b0e7e089dfc60ff1a")
