index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7da3029263bfbb0699119a715ce22a3941cf8100428fd43c9e1e46bf436ca687")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7da3029263bfbb0699119a715ce22a3941cf8100428fd43c9e1e46bf436ca687")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7da3029263bfbb0699119a715ce22a3941cf8100428fd43c9e1e46bf436ca687")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7da3029263bfbb0699119a715ce22a3941cf8100428fd43c9e1e46bf436ca687")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7da3029263bfbb0699119a715ce22a3941cf8100428fd43c9e1e46bf436ca687")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7da3029263bfbb0699119a715ce22a3941cf8100428fd43c9e1e46bf436ca687")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cookreceipts.fun")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cookreceipts.fun")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cookreceipts.fun")
