index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("df2d6ef0450660aaae62c429610b964949812df2da1c57646fc29aa51c3f031e","dc6b0e8c1e9c113f0364e1c8370060dee3fcbe25b667ddeca7623a95cd21411f","d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e","aae6e388e774180bc3eb96dad5d5bfefd63d0eb7124d68b6991701936801f1c7","66490c59cb9630b53fa3fa7125b5c9511afde38edab4459065938c1974229ca8","81d0c71f8b282076cd93fb6bb5bfd3932422d033109e2c92572fc49e4abc2471","1fe9b489c25bb23b04d9996e8107671edee69bd6f6def2fe7ece38a0fb35f98e","d8353cfc5e696d3ae402c7c70565c1e7f31e49bcf74a6e12e5ab044f306b4b20","d5ce6f36a06b0dc8ce8e7e2c9a53e66094c2adfc93cfac61dd09efe9ac45a75f","cc0cdc6a3d843e22c98170713abf1d6ae06e8b5e34ed06ac3159adafe85e3bd6","0496ca57e387b10dfdac809de8a4e039f68e8d66535d5d19ec76d39f7d0a4402","8e846ed965bbc0270a6f58c5818e039ef2fb78def4d2bf82348ca786ea0cea4f","8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("df2d6ef0450660aaae62c429610b964949812df2da1c57646fc29aa51c3f031e","dc6b0e8c1e9c113f0364e1c8370060dee3fcbe25b667ddeca7623a95cd21411f","d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e","aae6e388e774180bc3eb96dad5d5bfefd63d0eb7124d68b6991701936801f1c7","66490c59cb9630b53fa3fa7125b5c9511afde38edab4459065938c1974229ca8","81d0c71f8b282076cd93fb6bb5bfd3932422d033109e2c92572fc49e4abc2471","1fe9b489c25bb23b04d9996e8107671edee69bd6f6def2fe7ece38a0fb35f98e","d8353cfc5e696d3ae402c7c70565c1e7f31e49bcf74a6e12e5ab044f306b4b20","d5ce6f36a06b0dc8ce8e7e2c9a53e66094c2adfc93cfac61dd09efe9ac45a75f","cc0cdc6a3d843e22c98170713abf1d6ae06e8b5e34ed06ac3159adafe85e3bd6","0496ca57e387b10dfdac809de8a4e039f68e8d66535d5d19ec76d39f7d0a4402","8e846ed965bbc0270a6f58c5818e039ef2fb78def4d2bf82348ca786ea0cea4f","8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("df2d6ef0450660aaae62c429610b964949812df2da1c57646fc29aa51c3f031e","dc6b0e8c1e9c113f0364e1c8370060dee3fcbe25b667ddeca7623a95cd21411f","d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e","aae6e388e774180bc3eb96dad5d5bfefd63d0eb7124d68b6991701936801f1c7","66490c59cb9630b53fa3fa7125b5c9511afde38edab4459065938c1974229ca8","81d0c71f8b282076cd93fb6bb5bfd3932422d033109e2c92572fc49e4abc2471","1fe9b489c25bb23b04d9996e8107671edee69bd6f6def2fe7ece38a0fb35f98e","d8353cfc5e696d3ae402c7c70565c1e7f31e49bcf74a6e12e5ab044f306b4b20","d5ce6f36a06b0dc8ce8e7e2c9a53e66094c2adfc93cfac61dd09efe9ac45a75f","cc0cdc6a3d843e22c98170713abf1d6ae06e8b5e34ed06ac3159adafe85e3bd6","0496ca57e387b10dfdac809de8a4e039f68e8d66535d5d19ec76d39f7d0a4402","8e846ed965bbc0270a6f58c5818e039ef2fb78def4d2bf82348ca786ea0cea4f","8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("df2d6ef0450660aaae62c429610b964949812df2da1c57646fc29aa51c3f031e","dc6b0e8c1e9c113f0364e1c8370060dee3fcbe25b667ddeca7623a95cd21411f","d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e","aae6e388e774180bc3eb96dad5d5bfefd63d0eb7124d68b6991701936801f1c7","66490c59cb9630b53fa3fa7125b5c9511afde38edab4459065938c1974229ca8","81d0c71f8b282076cd93fb6bb5bfd3932422d033109e2c92572fc49e4abc2471","1fe9b489c25bb23b04d9996e8107671edee69bd6f6def2fe7ece38a0fb35f98e","d8353cfc5e696d3ae402c7c70565c1e7f31e49bcf74a6e12e5ab044f306b4b20","d5ce6f36a06b0dc8ce8e7e2c9a53e66094c2adfc93cfac61dd09efe9ac45a75f","cc0cdc6a3d843e22c98170713abf1d6ae06e8b5e34ed06ac3159adafe85e3bd6","0496ca57e387b10dfdac809de8a4e039f68e8d66535d5d19ec76d39f7d0a4402","8e846ed965bbc0270a6f58c5818e039ef2fb78def4d2bf82348ca786ea0cea4f","8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("df2d6ef0450660aaae62c429610b964949812df2da1c57646fc29aa51c3f031e","dc6b0e8c1e9c113f0364e1c8370060dee3fcbe25b667ddeca7623a95cd21411f","d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e","aae6e388e774180bc3eb96dad5d5bfefd63d0eb7124d68b6991701936801f1c7","66490c59cb9630b53fa3fa7125b5c9511afde38edab4459065938c1974229ca8","81d0c71f8b282076cd93fb6bb5bfd3932422d033109e2c92572fc49e4abc2471","1fe9b489c25bb23b04d9996e8107671edee69bd6f6def2fe7ece38a0fb35f98e","d8353cfc5e696d3ae402c7c70565c1e7f31e49bcf74a6e12e5ab044f306b4b20","d5ce6f36a06b0dc8ce8e7e2c9a53e66094c2adfc93cfac61dd09efe9ac45a75f","cc0cdc6a3d843e22c98170713abf1d6ae06e8b5e34ed06ac3159adafe85e3bd6","0496ca57e387b10dfdac809de8a4e039f68e8d66535d5d19ec76d39f7d0a4402","8e846ed965bbc0270a6f58c5818e039ef2fb78def4d2bf82348ca786ea0cea4f","8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("df2d6ef0450660aaae62c429610b964949812df2da1c57646fc29aa51c3f031e","dc6b0e8c1e9c113f0364e1c8370060dee3fcbe25b667ddeca7623a95cd21411f","d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e","aae6e388e774180bc3eb96dad5d5bfefd63d0eb7124d68b6991701936801f1c7","66490c59cb9630b53fa3fa7125b5c9511afde38edab4459065938c1974229ca8","81d0c71f8b282076cd93fb6bb5bfd3932422d033109e2c92572fc49e4abc2471","1fe9b489c25bb23b04d9996e8107671edee69bd6f6def2fe7ece38a0fb35f98e","d8353cfc5e696d3ae402c7c70565c1e7f31e49bcf74a6e12e5ab044f306b4b20","d5ce6f36a06b0dc8ce8e7e2c9a53e66094c2adfc93cfac61dd09efe9ac45a75f","cc0cdc6a3d843e22c98170713abf1d6ae06e8b5e34ed06ac3159adafe85e3bd6","0496ca57e387b10dfdac809de8a4e039f68e8d66535d5d19ec76d39f7d0a4402","8e846ed965bbc0270a6f58c5818e039ef2fb78def4d2bf82348ca786ea0cea4f","8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd")
