index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0ee738b3837bebb5ce93be890a196d3e","11d36c3b57d63ed9e2e91495dcda3655","204cb61fce8fc4ac912dcb3bcef910ad","a7a30d88c84ff7abe373fa41c9f52422","b1475bdbe04659e62f3c94bfb4571394","b2eb3785e26c5f064b7d0c58bdd3abe0","d8fa458192539d848ee7bb171ebed6bd","e7ce1874ab781c7a14019b6a6e206749","eb6cf9da476c821f4871905547e6a2b4","f5ea39b70f747e34ae024308298f70ac","f8d30c45ed9d3c71ec0f8176ddd7fd8f","6d0ab5f4586166ac3600863bc9ac493e","0bd0f1dd8b03c11b3d59da2c5fba2e45","cc4a9d5248095e64c1f22e8a439416cc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0ee738b3837bebb5ce93be890a196d3e","11d36c3b57d63ed9e2e91495dcda3655","204cb61fce8fc4ac912dcb3bcef910ad","a7a30d88c84ff7abe373fa41c9f52422","b1475bdbe04659e62f3c94bfb4571394","b2eb3785e26c5f064b7d0c58bdd3abe0","d8fa458192539d848ee7bb171ebed6bd","e7ce1874ab781c7a14019b6a6e206749","eb6cf9da476c821f4871905547e6a2b4","f5ea39b70f747e34ae024308298f70ac","f8d30c45ed9d3c71ec0f8176ddd7fd8f","6d0ab5f4586166ac3600863bc9ac493e","0bd0f1dd8b03c11b3d59da2c5fba2e45","cc4a9d5248095e64c1f22e8a439416cc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0ee738b3837bebb5ce93be890a196d3e","11d36c3b57d63ed9e2e91495dcda3655","204cb61fce8fc4ac912dcb3bcef910ad","a7a30d88c84ff7abe373fa41c9f52422","b1475bdbe04659e62f3c94bfb4571394","b2eb3785e26c5f064b7d0c58bdd3abe0","d8fa458192539d848ee7bb171ebed6bd","e7ce1874ab781c7a14019b6a6e206749","eb6cf9da476c821f4871905547e6a2b4","f5ea39b70f747e34ae024308298f70ac","f8d30c45ed9d3c71ec0f8176ddd7fd8f","6d0ab5f4586166ac3600863bc9ac493e","0bd0f1dd8b03c11b3d59da2c5fba2e45","cc4a9d5248095e64c1f22e8a439416cc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0ee738b3837bebb5ce93be890a196d3e","11d36c3b57d63ed9e2e91495dcda3655","204cb61fce8fc4ac912dcb3bcef910ad","a7a30d88c84ff7abe373fa41c9f52422","b1475bdbe04659e62f3c94bfb4571394","b2eb3785e26c5f064b7d0c58bdd3abe0","d8fa458192539d848ee7bb171ebed6bd","e7ce1874ab781c7a14019b6a6e206749","eb6cf9da476c821f4871905547e6a2b4","f5ea39b70f747e34ae024308298f70ac","f8d30c45ed9d3c71ec0f8176ddd7fd8f","6d0ab5f4586166ac3600863bc9ac493e","0bd0f1dd8b03c11b3d59da2c5fba2e45","cc4a9d5248095e64c1f22e8a439416cc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0ee738b3837bebb5ce93be890a196d3e","11d36c3b57d63ed9e2e91495dcda3655","204cb61fce8fc4ac912dcb3bcef910ad","a7a30d88c84ff7abe373fa41c9f52422","b1475bdbe04659e62f3c94bfb4571394","b2eb3785e26c5f064b7d0c58bdd3abe0","d8fa458192539d848ee7bb171ebed6bd","e7ce1874ab781c7a14019b6a6e206749","eb6cf9da476c821f4871905547e6a2b4","f5ea39b70f747e34ae024308298f70ac","f8d30c45ed9d3c71ec0f8176ddd7fd8f","6d0ab5f4586166ac3600863bc9ac493e","0bd0f1dd8b03c11b3d59da2c5fba2e45","cc4a9d5248095e64c1f22e8a439416cc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0ee738b3837bebb5ce93be890a196d3e","11d36c3b57d63ed9e2e91495dcda3655","204cb61fce8fc4ac912dcb3bcef910ad","a7a30d88c84ff7abe373fa41c9f52422","b1475bdbe04659e62f3c94bfb4571394","b2eb3785e26c5f064b7d0c58bdd3abe0","d8fa458192539d848ee7bb171ebed6bd","e7ce1874ab781c7a14019b6a6e206749","eb6cf9da476c821f4871905547e6a2b4","f5ea39b70f747e34ae024308298f70ac","f8d30c45ed9d3c71ec0f8176ddd7fd8f","6d0ab5f4586166ac3600863bc9ac493e","0bd0f1dd8b03c11b3d59da2c5fba2e45","cc4a9d5248095e64c1f22e8a439416cc")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://elemental-future-cheetah.glitch.me/afe92a2bd2D","https://elemental-future-cheetah.glitch.me/afe92a2bd2P","https://elemental-future-cheetah.glitch.me/559084b660P","https://elemental-future-cheetah.glitch.me/02d9169d60D","https://elemental-future-cheetah.glitch.me/02d9169d60P","https://confusion-cerulean-samba.glitch.me/e1db93941c","https://confusion-cerulean-samba.glitch.me/0627f41878D","https://confusion-cerulean-samba.glitch.me/0627f41878P","https://confusion-cerulean-samba.glitch.me/192f188023","https://confusion-cerulean-samba.glitch.me/2e06bb0ce9","https://confusion-cerulean-samba.glitch.me/55da2c2031","https://torpid-resisted-sugar.glitch.me/fb3b5e76b4D","https://torpid-resisted-sugar.glitch.me/fb3b5e76b4P","https://torpid-resisted-sugar.glitch.me/83a57b42f1D","https://torpid-resisted-sugar.glitch.me/83a57b42f1P","https://torpid-resisted-sugar.glitch.me/5db81501e9P","https://immense-plastic-pullover.glitch.me/T812D","https://immense-plastic-pullover.glitch.me/T812P")
