index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","bae88a899f41ddce157ed42a2a5f800cd00fcbc400a98a11a9563976ef4c9655")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","bae88a899f41ddce157ed42a2a5f800cd00fcbc400a98a11a9563976ef4c9655")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","bae88a899f41ddce157ed42a2a5f800cd00fcbc400a98a11a9563976ef4c9655")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","bae88a899f41ddce157ed42a2a5f800cd00fcbc400a98a11a9563976ef4c9655")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","bae88a899f41ddce157ed42a2a5f800cd00fcbc400a98a11a9563976ef4c9655")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","bae88a899f41ddce157ed42a2a5f800cd00fcbc400a98a11a9563976ef4c9655")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "3proxy.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "3proxy.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "3proxy.ru")
