index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("915ea807cdf10ea4a4912377d7c688a527d0e91c7777d811b171d2960b75c65c","c1c89e5eef403532b5330710c9fe1348ebd055d0fe4e3ebbe9821555e36d408e","d83fbc9534957dd464cbc7cd2797d3041bd0d1a72b213b1ab7bccaec34359dbb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("915ea807cdf10ea4a4912377d7c688a527d0e91c7777d811b171d2960b75c65c","c1c89e5eef403532b5330710c9fe1348ebd055d0fe4e3ebbe9821555e36d408e","d83fbc9534957dd464cbc7cd2797d3041bd0d1a72b213b1ab7bccaec34359dbb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("915ea807cdf10ea4a4912377d7c688a527d0e91c7777d811b171d2960b75c65c","c1c89e5eef403532b5330710c9fe1348ebd055d0fe4e3ebbe9821555e36d408e","d83fbc9534957dd464cbc7cd2797d3041bd0d1a72b213b1ab7bccaec34359dbb")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("915ea807cdf10ea4a4912377d7c688a527d0e91c7777d811b171d2960b75c65c","c1c89e5eef403532b5330710c9fe1348ebd055d0fe4e3ebbe9821555e36d408e","d83fbc9534957dd464cbc7cd2797d3041bd0d1a72b213b1ab7bccaec34359dbb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("915ea807cdf10ea4a4912377d7c688a527d0e91c7777d811b171d2960b75c65c","c1c89e5eef403532b5330710c9fe1348ebd055d0fe4e3ebbe9821555e36d408e","d83fbc9534957dd464cbc7cd2797d3041bd0d1a72b213b1ab7bccaec34359dbb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("915ea807cdf10ea4a4912377d7c688a527d0e91c7777d811b171d2960b75c65c","c1c89e5eef403532b5330710c9fe1348ebd055d0fe4e3ebbe9821555e36d408e","d83fbc9534957dd464cbc7cd2797d3041bd0d1a72b213b1ab7bccaec34359dbb")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://mettlybothe.com/8/forum.php	")
