index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8a66ccf9261a0cc08a6ad085d6dd4055","8b860c5d34254290769d40d703625f774c213e00","04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd","fd969b03b439284ff7a31c39cd336f25","6a8c00b703a5d6b8c82878628978db9bf282d6ae","4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863","0bd3b9f55a2d3a13f506d9d8b970e0de","f023177aca17f6dc90fdd9588240cb16c70a9fe2","63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0","83720e64aa1388d55324a22536bd39cd","8fa3636a7697f953d7daa02a313981b9e3bc98e4","659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9","5bf9f601188a4b11a8baf9b2abbd18fa","125ea078bc3cc79b34bec8141391acaf2d69ffe2","6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437","0e2d4679f68796e9dd0d663137cb9e12","7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2","8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870","145e3c224e4ecaf26d4638efb9d622a7","70d5b0be6ed51e43c0a19b773cead8793257bbc1","9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89","491a38f52692a88f5e97a1107c06a9f5","4a4609839b846f384f1b6f3a9a945bf3119d2f9c","a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e","8bf00ef4dd6bb308c76849901b03ccbd","04e8a8d30869cf60ad42825667224d5cd01ade15","a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4","31d3f0ae33c72beff48c9459b132d24d","f5bf9d483e0a204e7ff59fc092b4e580951802ca","b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86","530f12f8058199964d0b41f1856185ec","8b04023990d18dcd5cc4c5538b332b017f3962fc","bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a","aa043913e02f124a4e7171fa40dfc9a2","73338b8931a3c265e8b544fa17de3056a3e56b59","bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7","400c1c6312f99e4640077994bbfaedde","657a875554b075eb7f2d314bbbe967c789624b30","cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce","da6b25206a29c8ac9a8cbb4be5d3875c","0e23cd5f100a035bd5ad521a6ad40454fda084c7","d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540","1c3db7002523e1acd621c90701c694ae","aee092fd31772d33932a7a02dd2d73ede67f7db0","d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe","cb34374f1b5fb771076872c6b14b7501","118f688c30a2f6c2d1feb955f53ce4acf3086b3b","e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37","a57e4e3a3fa46bbdbc9d803283af3479","4ede7f018c317ddc6a5f8f935f917621668cb1ec","f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8a66ccf9261a0cc08a6ad085d6dd4055","8b860c5d34254290769d40d703625f774c213e00","04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd","fd969b03b439284ff7a31c39cd336f25","6a8c00b703a5d6b8c82878628978db9bf282d6ae","4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863","0bd3b9f55a2d3a13f506d9d8b970e0de","f023177aca17f6dc90fdd9588240cb16c70a9fe2","63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0","83720e64aa1388d55324a22536bd39cd","8fa3636a7697f953d7daa02a313981b9e3bc98e4","659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9","5bf9f601188a4b11a8baf9b2abbd18fa","125ea078bc3cc79b34bec8141391acaf2d69ffe2","6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437","0e2d4679f68796e9dd0d663137cb9e12","7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2","8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870","145e3c224e4ecaf26d4638efb9d622a7","70d5b0be6ed51e43c0a19b773cead8793257bbc1","9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89","491a38f52692a88f5e97a1107c06a9f5","4a4609839b846f384f1b6f3a9a945bf3119d2f9c","a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e","8bf00ef4dd6bb308c76849901b03ccbd","04e8a8d30869cf60ad42825667224d5cd01ade15","a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4","31d3f0ae33c72beff48c9459b132d24d","f5bf9d483e0a204e7ff59fc092b4e580951802ca","b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86","530f12f8058199964d0b41f1856185ec","8b04023990d18dcd5cc4c5538b332b017f3962fc","bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a","aa043913e02f124a4e7171fa40dfc9a2","73338b8931a3c265e8b544fa17de3056a3e56b59","bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7","400c1c6312f99e4640077994bbfaedde","657a875554b075eb7f2d314bbbe967c789624b30","cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce","da6b25206a29c8ac9a8cbb4be5d3875c","0e23cd5f100a035bd5ad521a6ad40454fda084c7","d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540","1c3db7002523e1acd621c90701c694ae","aee092fd31772d33932a7a02dd2d73ede67f7db0","d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe","cb34374f1b5fb771076872c6b14b7501","118f688c30a2f6c2d1feb955f53ce4acf3086b3b","e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37","a57e4e3a3fa46bbdbc9d803283af3479","4ede7f018c317ddc6a5f8f935f917621668cb1ec","f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8a66ccf9261a0cc08a6ad085d6dd4055","8b860c5d34254290769d40d703625f774c213e00","04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd","fd969b03b439284ff7a31c39cd336f25","6a8c00b703a5d6b8c82878628978db9bf282d6ae","4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863","0bd3b9f55a2d3a13f506d9d8b970e0de","f023177aca17f6dc90fdd9588240cb16c70a9fe2","63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0","83720e64aa1388d55324a22536bd39cd","8fa3636a7697f953d7daa02a313981b9e3bc98e4","659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9","5bf9f601188a4b11a8baf9b2abbd18fa","125ea078bc3cc79b34bec8141391acaf2d69ffe2","6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437","0e2d4679f68796e9dd0d663137cb9e12","7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2","8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870","145e3c224e4ecaf26d4638efb9d622a7","70d5b0be6ed51e43c0a19b773cead8793257bbc1","9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89","491a38f52692a88f5e97a1107c06a9f5","4a4609839b846f384f1b6f3a9a945bf3119d2f9c","a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e","8bf00ef4dd6bb308c76849901b03ccbd","04e8a8d30869cf60ad42825667224d5cd01ade15","a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4","31d3f0ae33c72beff48c9459b132d24d","f5bf9d483e0a204e7ff59fc092b4e580951802ca","b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86","530f12f8058199964d0b41f1856185ec","8b04023990d18dcd5cc4c5538b332b017f3962fc","bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a","aa043913e02f124a4e7171fa40dfc9a2","73338b8931a3c265e8b544fa17de3056a3e56b59","bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7","400c1c6312f99e4640077994bbfaedde","657a875554b075eb7f2d314bbbe967c789624b30","cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce","da6b25206a29c8ac9a8cbb4be5d3875c","0e23cd5f100a035bd5ad521a6ad40454fda084c7","d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540","1c3db7002523e1acd621c90701c694ae","aee092fd31772d33932a7a02dd2d73ede67f7db0","d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe","cb34374f1b5fb771076872c6b14b7501","118f688c30a2f6c2d1feb955f53ce4acf3086b3b","e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37","a57e4e3a3fa46bbdbc9d803283af3479","4ede7f018c317ddc6a5f8f935f917621668cb1ec","f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8a66ccf9261a0cc08a6ad085d6dd4055","8b860c5d34254290769d40d703625f774c213e00","04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd","fd969b03b439284ff7a31c39cd336f25","6a8c00b703a5d6b8c82878628978db9bf282d6ae","4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863","0bd3b9f55a2d3a13f506d9d8b970e0de","f023177aca17f6dc90fdd9588240cb16c70a9fe2","63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0","83720e64aa1388d55324a22536bd39cd","8fa3636a7697f953d7daa02a313981b9e3bc98e4","659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9","5bf9f601188a4b11a8baf9b2abbd18fa","125ea078bc3cc79b34bec8141391acaf2d69ffe2","6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437","0e2d4679f68796e9dd0d663137cb9e12","7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2","8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870","145e3c224e4ecaf26d4638efb9d622a7","70d5b0be6ed51e43c0a19b773cead8793257bbc1","9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89","491a38f52692a88f5e97a1107c06a9f5","4a4609839b846f384f1b6f3a9a945bf3119d2f9c","a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e","8bf00ef4dd6bb308c76849901b03ccbd","04e8a8d30869cf60ad42825667224d5cd01ade15","a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4","31d3f0ae33c72beff48c9459b132d24d","f5bf9d483e0a204e7ff59fc092b4e580951802ca","b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86","530f12f8058199964d0b41f1856185ec","8b04023990d18dcd5cc4c5538b332b017f3962fc","bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a","aa043913e02f124a4e7171fa40dfc9a2","73338b8931a3c265e8b544fa17de3056a3e56b59","bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7","400c1c6312f99e4640077994bbfaedde","657a875554b075eb7f2d314bbbe967c789624b30","cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce","da6b25206a29c8ac9a8cbb4be5d3875c","0e23cd5f100a035bd5ad521a6ad40454fda084c7","d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540","1c3db7002523e1acd621c90701c694ae","aee092fd31772d33932a7a02dd2d73ede67f7db0","d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe","cb34374f1b5fb771076872c6b14b7501","118f688c30a2f6c2d1feb955f53ce4acf3086b3b","e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37","a57e4e3a3fa46bbdbc9d803283af3479","4ede7f018c317ddc6a5f8f935f917621668cb1ec","f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8a66ccf9261a0cc08a6ad085d6dd4055","8b860c5d34254290769d40d703625f774c213e00","04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd","fd969b03b439284ff7a31c39cd336f25","6a8c00b703a5d6b8c82878628978db9bf282d6ae","4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863","0bd3b9f55a2d3a13f506d9d8b970e0de","f023177aca17f6dc90fdd9588240cb16c70a9fe2","63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0","83720e64aa1388d55324a22536bd39cd","8fa3636a7697f953d7daa02a313981b9e3bc98e4","659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9","5bf9f601188a4b11a8baf9b2abbd18fa","125ea078bc3cc79b34bec8141391acaf2d69ffe2","6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437","0e2d4679f68796e9dd0d663137cb9e12","7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2","8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870","145e3c224e4ecaf26d4638efb9d622a7","70d5b0be6ed51e43c0a19b773cead8793257bbc1","9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89","491a38f52692a88f5e97a1107c06a9f5","4a4609839b846f384f1b6f3a9a945bf3119d2f9c","a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e","8bf00ef4dd6bb308c76849901b03ccbd","04e8a8d30869cf60ad42825667224d5cd01ade15","a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4","31d3f0ae33c72beff48c9459b132d24d","f5bf9d483e0a204e7ff59fc092b4e580951802ca","b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86","530f12f8058199964d0b41f1856185ec","8b04023990d18dcd5cc4c5538b332b017f3962fc","bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a","aa043913e02f124a4e7171fa40dfc9a2","73338b8931a3c265e8b544fa17de3056a3e56b59","bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7","400c1c6312f99e4640077994bbfaedde","657a875554b075eb7f2d314bbbe967c789624b30","cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce","da6b25206a29c8ac9a8cbb4be5d3875c","0e23cd5f100a035bd5ad521a6ad40454fda084c7","d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540","1c3db7002523e1acd621c90701c694ae","aee092fd31772d33932a7a02dd2d73ede67f7db0","d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe","cb34374f1b5fb771076872c6b14b7501","118f688c30a2f6c2d1feb955f53ce4acf3086b3b","e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37","a57e4e3a3fa46bbdbc9d803283af3479","4ede7f018c317ddc6a5f8f935f917621668cb1ec","f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8a66ccf9261a0cc08a6ad085d6dd4055","8b860c5d34254290769d40d703625f774c213e00","04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd","fd969b03b439284ff7a31c39cd336f25","6a8c00b703a5d6b8c82878628978db9bf282d6ae","4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863","0bd3b9f55a2d3a13f506d9d8b970e0de","f023177aca17f6dc90fdd9588240cb16c70a9fe2","63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0","83720e64aa1388d55324a22536bd39cd","8fa3636a7697f953d7daa02a313981b9e3bc98e4","659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9","5bf9f601188a4b11a8baf9b2abbd18fa","125ea078bc3cc79b34bec8141391acaf2d69ffe2","6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437","0e2d4679f68796e9dd0d663137cb9e12","7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2","8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870","145e3c224e4ecaf26d4638efb9d622a7","70d5b0be6ed51e43c0a19b773cead8793257bbc1","9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89","491a38f52692a88f5e97a1107c06a9f5","4a4609839b846f384f1b6f3a9a945bf3119d2f9c","a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e","8bf00ef4dd6bb308c76849901b03ccbd","04e8a8d30869cf60ad42825667224d5cd01ade15","a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4","31d3f0ae33c72beff48c9459b132d24d","f5bf9d483e0a204e7ff59fc092b4e580951802ca","b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86","530f12f8058199964d0b41f1856185ec","8b04023990d18dcd5cc4c5538b332b017f3962fc","bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a","aa043913e02f124a4e7171fa40dfc9a2","73338b8931a3c265e8b544fa17de3056a3e56b59","bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7","400c1c6312f99e4640077994bbfaedde","657a875554b075eb7f2d314bbbe967c789624b30","cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce","da6b25206a29c8ac9a8cbb4be5d3875c","0e23cd5f100a035bd5ad521a6ad40454fda084c7","d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540","1c3db7002523e1acd621c90701c694ae","aee092fd31772d33932a7a02dd2d73ede67f7db0","d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe","cb34374f1b5fb771076872c6b14b7501","118f688c30a2f6c2d1feb955f53ce4acf3086b3b","e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37","a57e4e3a3fa46bbdbc9d803283af3479","4ede7f018c317ddc6a5f8f935f917621668cb1ec","f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca")
