index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0cb24474909c8ef0a3772c64a0fd1cf4e5ff2b806d39fd36abf716d6ea7eefb3","788c345613ff6cfe617b911dda22b1a900558c28c75afe6c05f8fa0d02bd9811","274fabc7dea01750c5f0cbb659e10f15bcbf05f304d8e50f730ddfe54b7dd255","54b45e93cee8f08a97b86afa78a78bc070b6167dcc6cdc735bd167af076cb5b3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0cb24474909c8ef0a3772c64a0fd1cf4e5ff2b806d39fd36abf716d6ea7eefb3","788c345613ff6cfe617b911dda22b1a900558c28c75afe6c05f8fa0d02bd9811","274fabc7dea01750c5f0cbb659e10f15bcbf05f304d8e50f730ddfe54b7dd255","54b45e93cee8f08a97b86afa78a78bc070b6167dcc6cdc735bd167af076cb5b3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0cb24474909c8ef0a3772c64a0fd1cf4e5ff2b806d39fd36abf716d6ea7eefb3","788c345613ff6cfe617b911dda22b1a900558c28c75afe6c05f8fa0d02bd9811","274fabc7dea01750c5f0cbb659e10f15bcbf05f304d8e50f730ddfe54b7dd255","54b45e93cee8f08a97b86afa78a78bc070b6167dcc6cdc735bd167af076cb5b3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0cb24474909c8ef0a3772c64a0fd1cf4e5ff2b806d39fd36abf716d6ea7eefb3","788c345613ff6cfe617b911dda22b1a900558c28c75afe6c05f8fa0d02bd9811","274fabc7dea01750c5f0cbb659e10f15bcbf05f304d8e50f730ddfe54b7dd255","54b45e93cee8f08a97b86afa78a78bc070b6167dcc6cdc735bd167af076cb5b3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0cb24474909c8ef0a3772c64a0fd1cf4e5ff2b806d39fd36abf716d6ea7eefb3","788c345613ff6cfe617b911dda22b1a900558c28c75afe6c05f8fa0d02bd9811","274fabc7dea01750c5f0cbb659e10f15bcbf05f304d8e50f730ddfe54b7dd255","54b45e93cee8f08a97b86afa78a78bc070b6167dcc6cdc735bd167af076cb5b3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0cb24474909c8ef0a3772c64a0fd1cf4e5ff2b806d39fd36abf716d6ea7eefb3","788c345613ff6cfe617b911dda22b1a900558c28c75afe6c05f8fa0d02bd9811","274fabc7dea01750c5f0cbb659e10f15bcbf05f304d8e50f730ddfe54b7dd255","54b45e93cee8f08a97b86afa78a78bc070b6167dcc6cdc735bd167af076cb5b3")
