index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0a38080d4101dccf056434348527835633dd589c","1cfad5b29b12f3c27ad9efb84524532e27407547","debbb192798bb1c89d935257972498278885ccec","63c9506d704ee873a75abe18163122fcfe114cc5","0a2f947b5c844713b7c55188aa2e47917945816e","eca8a2fdb052676e96b56fe3559694eab3fe87bc","c03805a7b2ef8401f4b2c44698f361fb5fa03672")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0a38080d4101dccf056434348527835633dd589c","1cfad5b29b12f3c27ad9efb84524532e27407547","debbb192798bb1c89d935257972498278885ccec","63c9506d704ee873a75abe18163122fcfe114cc5","0a2f947b5c844713b7c55188aa2e47917945816e","eca8a2fdb052676e96b56fe3559694eab3fe87bc","c03805a7b2ef8401f4b2c44698f361fb5fa03672")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0a38080d4101dccf056434348527835633dd589c","1cfad5b29b12f3c27ad9efb84524532e27407547","debbb192798bb1c89d935257972498278885ccec","63c9506d704ee873a75abe18163122fcfe114cc5","0a2f947b5c844713b7c55188aa2e47917945816e","eca8a2fdb052676e96b56fe3559694eab3fe87bc","c03805a7b2ef8401f4b2c44698f361fb5fa03672")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0a38080d4101dccf056434348527835633dd589c","1cfad5b29b12f3c27ad9efb84524532e27407547","debbb192798bb1c89d935257972498278885ccec","63c9506d704ee873a75abe18163122fcfe114cc5","0a2f947b5c844713b7c55188aa2e47917945816e","eca8a2fdb052676e96b56fe3559694eab3fe87bc","c03805a7b2ef8401f4b2c44698f361fb5fa03672")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0a38080d4101dccf056434348527835633dd589c","1cfad5b29b12f3c27ad9efb84524532e27407547","debbb192798bb1c89d935257972498278885ccec","63c9506d704ee873a75abe18163122fcfe114cc5","0a2f947b5c844713b7c55188aa2e47917945816e","eca8a2fdb052676e96b56fe3559694eab3fe87bc","c03805a7b2ef8401f4b2c44698f361fb5fa03672")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0a38080d4101dccf056434348527835633dd589c","1cfad5b29b12f3c27ad9efb84524532e27407547","debbb192798bb1c89d935257972498278885ccec","63c9506d704ee873a75abe18163122fcfe114cc5","0a2f947b5c844713b7c55188aa2e47917945816e","eca8a2fdb052676e96b56fe3559694eab3fe87bc","c03805a7b2ef8401f4b2c44698f361fb5fa03672")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://mobiletraits.s3.amazonaws.com/","https://specialattributes.s3.amazonaws.com/")
