index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("170eaccdac3c2d6e1777c38d61742ad531d6adbef3b8b031ebbbd6bc89b9add6","d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72","776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2","95e03836d604737f092d5534e68216f7c3ef82f529b5980e3145266d42392a82")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("170eaccdac3c2d6e1777c38d61742ad531d6adbef3b8b031ebbbd6bc89b9add6","d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72","776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2","95e03836d604737f092d5534e68216f7c3ef82f529b5980e3145266d42392a82")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("170eaccdac3c2d6e1777c38d61742ad531d6adbef3b8b031ebbbd6bc89b9add6","d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72","776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2","95e03836d604737f092d5534e68216f7c3ef82f529b5980e3145266d42392a82")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("170eaccdac3c2d6e1777c38d61742ad531d6adbef3b8b031ebbbd6bc89b9add6","d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72","776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2","95e03836d604737f092d5534e68216f7c3ef82f529b5980e3145266d42392a82")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("170eaccdac3c2d6e1777c38d61742ad531d6adbef3b8b031ebbbd6bc89b9add6","d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72","776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2","95e03836d604737f092d5534e68216f7c3ef82f529b5980e3145266d42392a82")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("170eaccdac3c2d6e1777c38d61742ad531d6adbef3b8b031ebbbd6bc89b9add6","d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72","776df245d497af81c0e57fb7ef763c8b08a623ea044da9d79aa3b381192f70e2","95e03836d604737f092d5534e68216f7c3ef82f529b5980e3145266d42392a82")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://104.244.78.177/abb01.exe")
