index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("582a1bbd458b78d84e766db3737ab47b4127d3410b85f173c2ec64d242856f0e","2a0bf40f45c28e0dbf5ca9cdac539780761626cc98a59e2d3caeaac9166474e2","B6a2c36a123a162fd3afa917d727b2ad9a86b32eac510ea39263f84f94f13b5a","D2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("582a1bbd458b78d84e766db3737ab47b4127d3410b85f173c2ec64d242856f0e","2a0bf40f45c28e0dbf5ca9cdac539780761626cc98a59e2d3caeaac9166474e2","B6a2c36a123a162fd3afa917d727b2ad9a86b32eac510ea39263f84f94f13b5a","D2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("582a1bbd458b78d84e766db3737ab47b4127d3410b85f173c2ec64d242856f0e","2a0bf40f45c28e0dbf5ca9cdac539780761626cc98a59e2d3caeaac9166474e2","B6a2c36a123a162fd3afa917d727b2ad9a86b32eac510ea39263f84f94f13b5a","D2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("582a1bbd458b78d84e766db3737ab47b4127d3410b85f173c2ec64d242856f0e","2a0bf40f45c28e0dbf5ca9cdac539780761626cc98a59e2d3caeaac9166474e2","B6a2c36a123a162fd3afa917d727b2ad9a86b32eac510ea39263f84f94f13b5a","D2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("582a1bbd458b78d84e766db3737ab47b4127d3410b85f173c2ec64d242856f0e","2a0bf40f45c28e0dbf5ca9cdac539780761626cc98a59e2d3caeaac9166474e2","B6a2c36a123a162fd3afa917d727b2ad9a86b32eac510ea39263f84f94f13b5a","D2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("582a1bbd458b78d84e766db3737ab47b4127d3410b85f173c2ec64d242856f0e","2a0bf40f45c28e0dbf5ca9cdac539780761626cc98a59e2d3caeaac9166474e2","B6a2c36a123a162fd3afa917d727b2ad9a86b32eac510ea39263f84f94f13b5a","D2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cdn.pinnaclecart.io" OR destinationhostname CONTAINS "static.zdassets.io" OR destinationhostname CONTAINS "hal-data.org" OR destinationhostname CONTAINS "app.iofrontcloud.com" OR destinationhostname CONTAINS "mantisadnetwork.org" OR destinationhostname CONTAINS "stage.sleefnote.com" OR destinationhostname CONTAINS "js.speed-metrics.com" OR destinationhostname CONTAINS "cdn.inspecltet.com" OR destinationhostname CONTAINS "Sentry-cdn.io")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cdn.pinnaclecart.io" OR destinationhostname CONTAINS "static.zdassets.io" OR destinationhostname CONTAINS "hal-data.org" OR destinationhostname CONTAINS "app.iofrontcloud.com" OR destinationhostname CONTAINS "mantisadnetwork.org" OR destinationhostname CONTAINS "stage.sleefnote.com" OR destinationhostname CONTAINS "js.speed-metrics.com" OR destinationhostname CONTAINS "cdn.inspecltet.com" OR destinationhostname CONTAINS "Sentry-cdn.io")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cdn.pinnaclecart.io" OR destinationhostname CONTAINS "static.zdassets.io" OR destinationhostname CONTAINS "hal-data.org" OR destinationhostname CONTAINS "app.iofrontcloud.com" OR destinationhostname CONTAINS "mantisadnetwork.org" OR destinationhostname CONTAINS "stage.sleefnote.com" OR destinationhostname CONTAINS "js.speed-metrics.com" OR destinationhostname CONTAINS "cdn.inspecltet.com" OR destinationhostname CONTAINS "Sentry-cdn.io")
