index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae","605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4","8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd","b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963","cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537","5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049")
