index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("be453dcadd408fae5227f8b58f539f3f68aad081c9bf4f2c3dc0ff35c601ef5e","eff2feb50bebb797db7d881a44c549234315a84c861d2bb675899f7165db3ce7","4674f942f3b1841744d81c6bb740879540a6514f57c54ecc443a2ea250a0c459","7a0da7d7bc7e60548bbac036b675c2a8df0869d37bdaf337d16dc93d5bd39da3","37bbddb8e25859349f18c619f863f151660d1ed688c05e0f4a06da942fa154ec","271028308b8a45535b865b0818f39c098e78506a36de57ffee0087c810a65cdb","38207b0af1ad9d0ce047ae8d3b3535921106609c1b4d640a83d1592bb06cf1e2","8915469cb570b038f78d1fcf97d4f132df89e08086a07231cd43da3c443a8016")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("be453dcadd408fae5227f8b58f539f3f68aad081c9bf4f2c3dc0ff35c601ef5e","eff2feb50bebb797db7d881a44c549234315a84c861d2bb675899f7165db3ce7","4674f942f3b1841744d81c6bb740879540a6514f57c54ecc443a2ea250a0c459","7a0da7d7bc7e60548bbac036b675c2a8df0869d37bdaf337d16dc93d5bd39da3","37bbddb8e25859349f18c619f863f151660d1ed688c05e0f4a06da942fa154ec","271028308b8a45535b865b0818f39c098e78506a36de57ffee0087c810a65cdb","38207b0af1ad9d0ce047ae8d3b3535921106609c1b4d640a83d1592bb06cf1e2","8915469cb570b038f78d1fcf97d4f132df89e08086a07231cd43da3c443a8016")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("be453dcadd408fae5227f8b58f539f3f68aad081c9bf4f2c3dc0ff35c601ef5e","eff2feb50bebb797db7d881a44c549234315a84c861d2bb675899f7165db3ce7","4674f942f3b1841744d81c6bb740879540a6514f57c54ecc443a2ea250a0c459","7a0da7d7bc7e60548bbac036b675c2a8df0869d37bdaf337d16dc93d5bd39da3","37bbddb8e25859349f18c619f863f151660d1ed688c05e0f4a06da942fa154ec","271028308b8a45535b865b0818f39c098e78506a36de57ffee0087c810a65cdb","38207b0af1ad9d0ce047ae8d3b3535921106609c1b4d640a83d1592bb06cf1e2","8915469cb570b038f78d1fcf97d4f132df89e08086a07231cd43da3c443a8016")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("be453dcadd408fae5227f8b58f539f3f68aad081c9bf4f2c3dc0ff35c601ef5e","eff2feb50bebb797db7d881a44c549234315a84c861d2bb675899f7165db3ce7","4674f942f3b1841744d81c6bb740879540a6514f57c54ecc443a2ea250a0c459","7a0da7d7bc7e60548bbac036b675c2a8df0869d37bdaf337d16dc93d5bd39da3","37bbddb8e25859349f18c619f863f151660d1ed688c05e0f4a06da942fa154ec","271028308b8a45535b865b0818f39c098e78506a36de57ffee0087c810a65cdb","38207b0af1ad9d0ce047ae8d3b3535921106609c1b4d640a83d1592bb06cf1e2","8915469cb570b038f78d1fcf97d4f132df89e08086a07231cd43da3c443a8016")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("be453dcadd408fae5227f8b58f539f3f68aad081c9bf4f2c3dc0ff35c601ef5e","eff2feb50bebb797db7d881a44c549234315a84c861d2bb675899f7165db3ce7","4674f942f3b1841744d81c6bb740879540a6514f57c54ecc443a2ea250a0c459","7a0da7d7bc7e60548bbac036b675c2a8df0869d37bdaf337d16dc93d5bd39da3","37bbddb8e25859349f18c619f863f151660d1ed688c05e0f4a06da942fa154ec","271028308b8a45535b865b0818f39c098e78506a36de57ffee0087c810a65cdb","38207b0af1ad9d0ce047ae8d3b3535921106609c1b4d640a83d1592bb06cf1e2","8915469cb570b038f78d1fcf97d4f132df89e08086a07231cd43da3c443a8016")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("be453dcadd408fae5227f8b58f539f3f68aad081c9bf4f2c3dc0ff35c601ef5e","eff2feb50bebb797db7d881a44c549234315a84c861d2bb675899f7165db3ce7","4674f942f3b1841744d81c6bb740879540a6514f57c54ecc443a2ea250a0c459","7a0da7d7bc7e60548bbac036b675c2a8df0869d37bdaf337d16dc93d5bd39da3","37bbddb8e25859349f18c619f863f151660d1ed688c05e0f4a06da942fa154ec","271028308b8a45535b865b0818f39c098e78506a36de57ffee0087c810a65cdb","38207b0af1ad9d0ce047ae8d3b3535921106609c1b4d640a83d1592bb06cf1e2","8915469cb570b038f78d1fcf97d4f132df89e08086a07231cd43da3c443a8016")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://hahahahhasd@j.mp/kdwocqwqwqerheurfje","https://download1507.mediafire.com/af0tbthsvewg/od8k8i5brx9cpof/19.doc","https://8db3b91a-ea93-419b-b51b-0a69902759c5.usrfiles.com/ugd/8db3b9_e926d447972f4d23b3c2af4abee9467e.txt?dn=rendomtext","https://8db3b91a-ea93-419b-b51b-0a69902759c5.usrfiles.com/ugd/8db3b9_92ec48660f134f3bb502662383ca4ffb.txt?dn=rendomtext","https://kukadunikkk@kdaoskdokaodkwldld.blogspot.com/p/19.html","http://www.starinttxgkular.duckdns.org/s1/19.txt","https://raw.githubusercontent.com/swagkarna/Bypass-Tamper-Protection/main/NSudo.exe","https://www.mediafire.com/file/qh5j3uy8qo8cpu7/FINAL+MAIN+vbs+-+Copy.vbs/file","http://103.147.185.68/j/p19xw/mawa/48608c2b91739edc3959.php")
