index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a15be1bd758d3cb61928ced6cdb1b9fa39643d2db272909037d5426748f3e7a4","14b1a50c94c2751901f0584ec9953277c91c8fff","43d334c125968f73b71f3e9f15f96911a94e590c80955e0612a297c4a792ca07","d6dae3588a2a6ff124f693d9e23393c1c6bcef05","0427ebb4d26dfc456351aab28040a244c883077145b7b529b93621636663a812","8d0bfb0026505e551a1d9e7409d01f42e7c8bf40")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a15be1bd758d3cb61928ced6cdb1b9fa39643d2db272909037d5426748f3e7a4","14b1a50c94c2751901f0584ec9953277c91c8fff","43d334c125968f73b71f3e9f15f96911a94e590c80955e0612a297c4a792ca07","d6dae3588a2a6ff124f693d9e23393c1c6bcef05","0427ebb4d26dfc456351aab28040a244c883077145b7b529b93621636663a812","8d0bfb0026505e551a1d9e7409d01f42e7c8bf40")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a15be1bd758d3cb61928ced6cdb1b9fa39643d2db272909037d5426748f3e7a4","14b1a50c94c2751901f0584ec9953277c91c8fff","43d334c125968f73b71f3e9f15f96911a94e590c80955e0612a297c4a792ca07","d6dae3588a2a6ff124f693d9e23393c1c6bcef05","0427ebb4d26dfc456351aab28040a244c883077145b7b529b93621636663a812","8d0bfb0026505e551a1d9e7409d01f42e7c8bf40")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a15be1bd758d3cb61928ced6cdb1b9fa39643d2db272909037d5426748f3e7a4","14b1a50c94c2751901f0584ec9953277c91c8fff","43d334c125968f73b71f3e9f15f96911a94e590c80955e0612a297c4a792ca07","d6dae3588a2a6ff124f693d9e23393c1c6bcef05","0427ebb4d26dfc456351aab28040a244c883077145b7b529b93621636663a812","8d0bfb0026505e551a1d9e7409d01f42e7c8bf40")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a15be1bd758d3cb61928ced6cdb1b9fa39643d2db272909037d5426748f3e7a4","14b1a50c94c2751901f0584ec9953277c91c8fff","43d334c125968f73b71f3e9f15f96911a94e590c80955e0612a297c4a792ca07","d6dae3588a2a6ff124f693d9e23393c1c6bcef05","0427ebb4d26dfc456351aab28040a244c883077145b7b529b93621636663a812","8d0bfb0026505e551a1d9e7409d01f42e7c8bf40")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a15be1bd758d3cb61928ced6cdb1b9fa39643d2db272909037d5426748f3e7a4","14b1a50c94c2751901f0584ec9953277c91c8fff","43d334c125968f73b71f3e9f15f96911a94e590c80955e0612a297c4a792ca07","d6dae3588a2a6ff124f693d9e23393c1c6bcef05","0427ebb4d26dfc456351aab28040a244c883077145b7b529b93621636663a812","8d0bfb0026505e551a1d9e7409d01f42e7c8bf40")
