index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0a052eff71641ff91897af5bdecb4a98ed3cb32bcb6ff86c4396b1e3ceee0184","0ff4058f709d278ed662719b9627618c48e7a656c59f6bfecda9081c7cbd742b","146e554f0d56db9a88224cd6921744fdfe1f8ee4a9e3ac79711f9ab15f9d3c7f","165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8","28adb5fa487a7d726b8bad629736641aadbdacca5e4f417acc791d0e853924a7","2946ef53c8fec94dcdf9d3a1afc077ee9a3869eacb0879cb082ee0ce3de6a2e7","29b5a12cda22a30533e22620ae89c4a36c9235714f4bad2e3944c38acb3c5eee","331177ca9c2bf0c6ac4acd5d2d40c77991bb5edb6e546913528b1665d8b501f3","46a8c1e768f632d69d06bfbd93932d102965c9e3f7c37d4a92e30aaeca905675","5252cc9dd3a35f392cc50b298de47838298128f4a1924f9eb0756039ce1e4fa2","61126de1b795b976f3ac878f48e88fa77a87d7308ba57c7642b9e1068403a496")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0a052eff71641ff91897af5bdecb4a98ed3cb32bcb6ff86c4396b1e3ceee0184","0ff4058f709d278ed662719b9627618c48e7a656c59f6bfecda9081c7cbd742b","146e554f0d56db9a88224cd6921744fdfe1f8ee4a9e3ac79711f9ab15f9d3c7f","165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8","28adb5fa487a7d726b8bad629736641aadbdacca5e4f417acc791d0e853924a7","2946ef53c8fec94dcdf9d3a1afc077ee9a3869eacb0879cb082ee0ce3de6a2e7","29b5a12cda22a30533e22620ae89c4a36c9235714f4bad2e3944c38acb3c5eee","331177ca9c2bf0c6ac4acd5d2d40c77991bb5edb6e546913528b1665d8b501f3","46a8c1e768f632d69d06bfbd93932d102965c9e3f7c37d4a92e30aaeca905675","5252cc9dd3a35f392cc50b298de47838298128f4a1924f9eb0756039ce1e4fa2","61126de1b795b976f3ac878f48e88fa77a87d7308ba57c7642b9e1068403a496")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0a052eff71641ff91897af5bdecb4a98ed3cb32bcb6ff86c4396b1e3ceee0184","0ff4058f709d278ed662719b9627618c48e7a656c59f6bfecda9081c7cbd742b","146e554f0d56db9a88224cd6921744fdfe1f8ee4a9e3ac79711f9ab15f9d3c7f","165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8","28adb5fa487a7d726b8bad629736641aadbdacca5e4f417acc791d0e853924a7","2946ef53c8fec94dcdf9d3a1afc077ee9a3869eacb0879cb082ee0ce3de6a2e7","29b5a12cda22a30533e22620ae89c4a36c9235714f4bad2e3944c38acb3c5eee","331177ca9c2bf0c6ac4acd5d2d40c77991bb5edb6e546913528b1665d8b501f3","46a8c1e768f632d69d06bfbd93932d102965c9e3f7c37d4a92e30aaeca905675","5252cc9dd3a35f392cc50b298de47838298128f4a1924f9eb0756039ce1e4fa2","61126de1b795b976f3ac878f48e88fa77a87d7308ba57c7642b9e1068403a496")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0a052eff71641ff91897af5bdecb4a98ed3cb32bcb6ff86c4396b1e3ceee0184","0ff4058f709d278ed662719b9627618c48e7a656c59f6bfecda9081c7cbd742b","146e554f0d56db9a88224cd6921744fdfe1f8ee4a9e3ac79711f9ab15f9d3c7f","165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8","28adb5fa487a7d726b8bad629736641aadbdacca5e4f417acc791d0e853924a7","2946ef53c8fec94dcdf9d3a1afc077ee9a3869eacb0879cb082ee0ce3de6a2e7","29b5a12cda22a30533e22620ae89c4a36c9235714f4bad2e3944c38acb3c5eee","331177ca9c2bf0c6ac4acd5d2d40c77991bb5edb6e546913528b1665d8b501f3","46a8c1e768f632d69d06bfbd93932d102965c9e3f7c37d4a92e30aaeca905675","5252cc9dd3a35f392cc50b298de47838298128f4a1924f9eb0756039ce1e4fa2","61126de1b795b976f3ac878f48e88fa77a87d7308ba57c7642b9e1068403a496")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0a052eff71641ff91897af5bdecb4a98ed3cb32bcb6ff86c4396b1e3ceee0184","0ff4058f709d278ed662719b9627618c48e7a656c59f6bfecda9081c7cbd742b","146e554f0d56db9a88224cd6921744fdfe1f8ee4a9e3ac79711f9ab15f9d3c7f","165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8","28adb5fa487a7d726b8bad629736641aadbdacca5e4f417acc791d0e853924a7","2946ef53c8fec94dcdf9d3a1afc077ee9a3869eacb0879cb082ee0ce3de6a2e7","29b5a12cda22a30533e22620ae89c4a36c9235714f4bad2e3944c38acb3c5eee","331177ca9c2bf0c6ac4acd5d2d40c77991bb5edb6e546913528b1665d8b501f3","46a8c1e768f632d69d06bfbd93932d102965c9e3f7c37d4a92e30aaeca905675","5252cc9dd3a35f392cc50b298de47838298128f4a1924f9eb0756039ce1e4fa2","61126de1b795b976f3ac878f48e88fa77a87d7308ba57c7642b9e1068403a496")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0a052eff71641ff91897af5bdecb4a98ed3cb32bcb6ff86c4396b1e3ceee0184","0ff4058f709d278ed662719b9627618c48e7a656c59f6bfecda9081c7cbd742b","146e554f0d56db9a88224cd6921744fdfe1f8ee4a9e3ac79711f9ab15f9d3c7f","165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8","28adb5fa487a7d726b8bad629736641aadbdacca5e4f417acc791d0e853924a7","2946ef53c8fec94dcdf9d3a1afc077ee9a3869eacb0879cb082ee0ce3de6a2e7","29b5a12cda22a30533e22620ae89c4a36c9235714f4bad2e3944c38acb3c5eee","331177ca9c2bf0c6ac4acd5d2d40c77991bb5edb6e546913528b1665d8b501f3","46a8c1e768f632d69d06bfbd93932d102965c9e3f7c37d4a92e30aaeca905675","5252cc9dd3a35f392cc50b298de47838298128f4a1924f9eb0756039ce1e4fa2","61126de1b795b976f3ac878f48e88fa77a87d7308ba57c7642b9e1068403a496")
