index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f","c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908","a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287","815d7f9d732c4d1a70cec05433b8d4de75cba1ca9caabbbe4b8cde3f176cc670","910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db","866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc","c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f","c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908","a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287","815d7f9d732c4d1a70cec05433b8d4de75cba1ca9caabbbe4b8cde3f176cc670","910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db","866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc","c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f","c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908","a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287","815d7f9d732c4d1a70cec05433b8d4de75cba1ca9caabbbe4b8cde3f176cc670","910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db","866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc","c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f","c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908","a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287","815d7f9d732c4d1a70cec05433b8d4de75cba1ca9caabbbe4b8cde3f176cc670","910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db","866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc","c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f","c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908","a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287","815d7f9d732c4d1a70cec05433b8d4de75cba1ca9caabbbe4b8cde3f176cc670","910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db","866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc","c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f","c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908","a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287","815d7f9d732c4d1a70cec05433b8d4de75cba1ca9caabbbe4b8cde3f176cc670","910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db","866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc","c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a")
