index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("29e2ef8ef5c6ff95e98bff095e63dc05","bf7b36c521e52093360a4df0dd131703b7b3d648","94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916","1c3b8ae594cb4ce24c2680b47cebf808","1fb12e923bdb71a1f34e98576b780ab2840ba22e","ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330","b40b30329489d342b2aa5ef8309ad388","738c20a2cc825ae51b2a2f786248f850c8bab6f5","7d34f25ad8099bd069c5a04799299f17d127a3866b77ee34ffb59cfd36e29673","dcfd60883c73c3d92fceb6ac910d5b80","1cb1c2cd9f59d4e83eb3c950473a772406ec6f1a","48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0","cca50cd497970977a5e880f2e921db72","38c99e8cd95f28b8d79b758cb940cf139e09f6ae","ad67aaa50fd60d02f1378b4155f69cffa9591eaeb80523489a2355512cc30e8c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("29e2ef8ef5c6ff95e98bff095e63dc05","bf7b36c521e52093360a4df0dd131703b7b3d648","94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916","1c3b8ae594cb4ce24c2680b47cebf808","1fb12e923bdb71a1f34e98576b780ab2840ba22e","ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330","b40b30329489d342b2aa5ef8309ad388","738c20a2cc825ae51b2a2f786248f850c8bab6f5","7d34f25ad8099bd069c5a04799299f17d127a3866b77ee34ffb59cfd36e29673","dcfd60883c73c3d92fceb6ac910d5b80","1cb1c2cd9f59d4e83eb3c950473a772406ec6f1a","48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0","cca50cd497970977a5e880f2e921db72","38c99e8cd95f28b8d79b758cb940cf139e09f6ae","ad67aaa50fd60d02f1378b4155f69cffa9591eaeb80523489a2355512cc30e8c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("29e2ef8ef5c6ff95e98bff095e63dc05","bf7b36c521e52093360a4df0dd131703b7b3d648","94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916","1c3b8ae594cb4ce24c2680b47cebf808","1fb12e923bdb71a1f34e98576b780ab2840ba22e","ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330","b40b30329489d342b2aa5ef8309ad388","738c20a2cc825ae51b2a2f786248f850c8bab6f5","7d34f25ad8099bd069c5a04799299f17d127a3866b77ee34ffb59cfd36e29673","dcfd60883c73c3d92fceb6ac910d5b80","1cb1c2cd9f59d4e83eb3c950473a772406ec6f1a","48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0","cca50cd497970977a5e880f2e921db72","38c99e8cd95f28b8d79b758cb940cf139e09f6ae","ad67aaa50fd60d02f1378b4155f69cffa9591eaeb80523489a2355512cc30e8c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("29e2ef8ef5c6ff95e98bff095e63dc05","bf7b36c521e52093360a4df0dd131703b7b3d648","94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916","1c3b8ae594cb4ce24c2680b47cebf808","1fb12e923bdb71a1f34e98576b780ab2840ba22e","ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330","b40b30329489d342b2aa5ef8309ad388","738c20a2cc825ae51b2a2f786248f850c8bab6f5","7d34f25ad8099bd069c5a04799299f17d127a3866b77ee34ffb59cfd36e29673","dcfd60883c73c3d92fceb6ac910d5b80","1cb1c2cd9f59d4e83eb3c950473a772406ec6f1a","48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0","cca50cd497970977a5e880f2e921db72","38c99e8cd95f28b8d79b758cb940cf139e09f6ae","ad67aaa50fd60d02f1378b4155f69cffa9591eaeb80523489a2355512cc30e8c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("29e2ef8ef5c6ff95e98bff095e63dc05","bf7b36c521e52093360a4df0dd131703b7b3d648","94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916","1c3b8ae594cb4ce24c2680b47cebf808","1fb12e923bdb71a1f34e98576b780ab2840ba22e","ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330","b40b30329489d342b2aa5ef8309ad388","738c20a2cc825ae51b2a2f786248f850c8bab6f5","7d34f25ad8099bd069c5a04799299f17d127a3866b77ee34ffb59cfd36e29673","dcfd60883c73c3d92fceb6ac910d5b80","1cb1c2cd9f59d4e83eb3c950473a772406ec6f1a","48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0","cca50cd497970977a5e880f2e921db72","38c99e8cd95f28b8d79b758cb940cf139e09f6ae","ad67aaa50fd60d02f1378b4155f69cffa9591eaeb80523489a2355512cc30e8c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("29e2ef8ef5c6ff95e98bff095e63dc05","bf7b36c521e52093360a4df0dd131703b7b3d648","94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916","1c3b8ae594cb4ce24c2680b47cebf808","1fb12e923bdb71a1f34e98576b780ab2840ba22e","ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330","b40b30329489d342b2aa5ef8309ad388","738c20a2cc825ae51b2a2f786248f850c8bab6f5","7d34f25ad8099bd069c5a04799299f17d127a3866b77ee34ffb59cfd36e29673","dcfd60883c73c3d92fceb6ac910d5b80","1cb1c2cd9f59d4e83eb3c950473a772406ec6f1a","48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0","cca50cd497970977a5e880f2e921db72","38c99e8cd95f28b8d79b758cb940cf139e09f6ae","ad67aaa50fd60d02f1378b4155f69cffa9591eaeb80523489a2355512cc30e8c")
