index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5b5b1608e6736c7759b1ecf61e756794cf9ef3bb4752c315527bcc675480b6c6","3d3598d32a75fd80c9ba965f000639024e4ea1363188f44c5d3d6d6718aaa1a3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5b5b1608e6736c7759b1ecf61e756794cf9ef3bb4752c315527bcc675480b6c6","3d3598d32a75fd80c9ba965f000639024e4ea1363188f44c5d3d6d6718aaa1a3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5b5b1608e6736c7759b1ecf61e756794cf9ef3bb4752c315527bcc675480b6c6","3d3598d32a75fd80c9ba965f000639024e4ea1363188f44c5d3d6d6718aaa1a3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5b5b1608e6736c7759b1ecf61e756794cf9ef3bb4752c315527bcc675480b6c6","3d3598d32a75fd80c9ba965f000639024e4ea1363188f44c5d3d6d6718aaa1a3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5b5b1608e6736c7759b1ecf61e756794cf9ef3bb4752c315527bcc675480b6c6","3d3598d32a75fd80c9ba965f000639024e4ea1363188f44c5d3d6d6718aaa1a3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5b5b1608e6736c7759b1ecf61e756794cf9ef3bb4752c315527bcc675480b6c6","3d3598d32a75fd80c9ba965f000639024e4ea1363188f44c5d3d6d6718aaa1a3")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "bgre.kozow.com" OR destinationhostname CONTAINS "karachidha.org")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "bgre.kozow.com" OR destinationhostname CONTAINS "karachidha.org")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "bgre.kozow.com" OR destinationhostname CONTAINS "karachidha.org")
