index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f69d32157189945fa2bf47a690a8bd62","4f10e10050d3da0b369f6636ede18a418ecab3a0","ea463bf8e502d0ff68736afa3dcbb59c969a6dc5776c0d7d10bb282ec3b62282","de19ea6e9cdf2ac5d22a00d24898532d","0786eb857c20dedb578e181cafba81ef0a097205","562cfbab3c6c4daf3a7f81412c77d5b70402c48aed3f49066cb758742b068afd","c8d12b90e9efd04a2c523efaef3d01d4","abd78cf430d91d07387e7305be6523249af38caa","88cb332eb82f3c086eaa33607a173cf6410bff0b9a21d6692225ffb9bbe877c6","92fd2e7d4dfced8c635fbcb54bb651b9","be6648ada0074cb76b5da7854c37cb784c52f989","4a41a1b8adf426959ece8ebed0fccdcd5db1124eb0686c2f590b3b93392429e6","6322a2a4b5dd34ecff3af22c4fac94cf","5679ada30e9cdbdfe62a05448d76e7034489945a","40b1bc34ecaddc7f08ca6399cb2a07520a7203394aa3accb1bb7d94aa21b35d6","3a0f85d811916f66371b9a994472667c","ba251c5f2884e2535a2178509b9065a9be969965","0d6dec29075584af62801306913430c1733882955eedcd9e9a4916b2dae4d457","0bd1d822710ca4cd8612cfcd78a12155","94df55b21bbd7bb82ab269d7840a3188003e5d35","e1f3763092aa779fd291afe9aa18866658966332b13caa57d34d294120e1f608","9d705f6333fc8cb3e75dde04e7a71ca4","cb84313a708723268a0608929887ad16fcf83a26","01e33b20366589b19f66ffdd560538e83fe1a63cab7f29e0a6754bcbb49ec7bb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f69d32157189945fa2bf47a690a8bd62","4f10e10050d3da0b369f6636ede18a418ecab3a0","ea463bf8e502d0ff68736afa3dcbb59c969a6dc5776c0d7d10bb282ec3b62282","de19ea6e9cdf2ac5d22a00d24898532d","0786eb857c20dedb578e181cafba81ef0a097205","562cfbab3c6c4daf3a7f81412c77d5b70402c48aed3f49066cb758742b068afd","c8d12b90e9efd04a2c523efaef3d01d4","abd78cf430d91d07387e7305be6523249af38caa","88cb332eb82f3c086eaa33607a173cf6410bff0b9a21d6692225ffb9bbe877c6","92fd2e7d4dfced8c635fbcb54bb651b9","be6648ada0074cb76b5da7854c37cb784c52f989","4a41a1b8adf426959ece8ebed0fccdcd5db1124eb0686c2f590b3b93392429e6","6322a2a4b5dd34ecff3af22c4fac94cf","5679ada30e9cdbdfe62a05448d76e7034489945a","40b1bc34ecaddc7f08ca6399cb2a07520a7203394aa3accb1bb7d94aa21b35d6","3a0f85d811916f66371b9a994472667c","ba251c5f2884e2535a2178509b9065a9be969965","0d6dec29075584af62801306913430c1733882955eedcd9e9a4916b2dae4d457","0bd1d822710ca4cd8612cfcd78a12155","94df55b21bbd7bb82ab269d7840a3188003e5d35","e1f3763092aa779fd291afe9aa18866658966332b13caa57d34d294120e1f608","9d705f6333fc8cb3e75dde04e7a71ca4","cb84313a708723268a0608929887ad16fcf83a26","01e33b20366589b19f66ffdd560538e83fe1a63cab7f29e0a6754bcbb49ec7bb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f69d32157189945fa2bf47a690a8bd62","4f10e10050d3da0b369f6636ede18a418ecab3a0","ea463bf8e502d0ff68736afa3dcbb59c969a6dc5776c0d7d10bb282ec3b62282","de19ea6e9cdf2ac5d22a00d24898532d","0786eb857c20dedb578e181cafba81ef0a097205","562cfbab3c6c4daf3a7f81412c77d5b70402c48aed3f49066cb758742b068afd","c8d12b90e9efd04a2c523efaef3d01d4","abd78cf430d91d07387e7305be6523249af38caa","88cb332eb82f3c086eaa33607a173cf6410bff0b9a21d6692225ffb9bbe877c6","92fd2e7d4dfced8c635fbcb54bb651b9","be6648ada0074cb76b5da7854c37cb784c52f989","4a41a1b8adf426959ece8ebed0fccdcd5db1124eb0686c2f590b3b93392429e6","6322a2a4b5dd34ecff3af22c4fac94cf","5679ada30e9cdbdfe62a05448d76e7034489945a","40b1bc34ecaddc7f08ca6399cb2a07520a7203394aa3accb1bb7d94aa21b35d6","3a0f85d811916f66371b9a994472667c","ba251c5f2884e2535a2178509b9065a9be969965","0d6dec29075584af62801306913430c1733882955eedcd9e9a4916b2dae4d457","0bd1d822710ca4cd8612cfcd78a12155","94df55b21bbd7bb82ab269d7840a3188003e5d35","e1f3763092aa779fd291afe9aa18866658966332b13caa57d34d294120e1f608","9d705f6333fc8cb3e75dde04e7a71ca4","cb84313a708723268a0608929887ad16fcf83a26","01e33b20366589b19f66ffdd560538e83fe1a63cab7f29e0a6754bcbb49ec7bb")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f69d32157189945fa2bf47a690a8bd62","4f10e10050d3da0b369f6636ede18a418ecab3a0","ea463bf8e502d0ff68736afa3dcbb59c969a6dc5776c0d7d10bb282ec3b62282","de19ea6e9cdf2ac5d22a00d24898532d","0786eb857c20dedb578e181cafba81ef0a097205","562cfbab3c6c4daf3a7f81412c77d5b70402c48aed3f49066cb758742b068afd","c8d12b90e9efd04a2c523efaef3d01d4","abd78cf430d91d07387e7305be6523249af38caa","88cb332eb82f3c086eaa33607a173cf6410bff0b9a21d6692225ffb9bbe877c6","92fd2e7d4dfced8c635fbcb54bb651b9","be6648ada0074cb76b5da7854c37cb784c52f989","4a41a1b8adf426959ece8ebed0fccdcd5db1124eb0686c2f590b3b93392429e6","6322a2a4b5dd34ecff3af22c4fac94cf","5679ada30e9cdbdfe62a05448d76e7034489945a","40b1bc34ecaddc7f08ca6399cb2a07520a7203394aa3accb1bb7d94aa21b35d6","3a0f85d811916f66371b9a994472667c","ba251c5f2884e2535a2178509b9065a9be969965","0d6dec29075584af62801306913430c1733882955eedcd9e9a4916b2dae4d457","0bd1d822710ca4cd8612cfcd78a12155","94df55b21bbd7bb82ab269d7840a3188003e5d35","e1f3763092aa779fd291afe9aa18866658966332b13caa57d34d294120e1f608","9d705f6333fc8cb3e75dde04e7a71ca4","cb84313a708723268a0608929887ad16fcf83a26","01e33b20366589b19f66ffdd560538e83fe1a63cab7f29e0a6754bcbb49ec7bb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f69d32157189945fa2bf47a690a8bd62","4f10e10050d3da0b369f6636ede18a418ecab3a0","ea463bf8e502d0ff68736afa3dcbb59c969a6dc5776c0d7d10bb282ec3b62282","de19ea6e9cdf2ac5d22a00d24898532d","0786eb857c20dedb578e181cafba81ef0a097205","562cfbab3c6c4daf3a7f81412c77d5b70402c48aed3f49066cb758742b068afd","c8d12b90e9efd04a2c523efaef3d01d4","abd78cf430d91d07387e7305be6523249af38caa","88cb332eb82f3c086eaa33607a173cf6410bff0b9a21d6692225ffb9bbe877c6","92fd2e7d4dfced8c635fbcb54bb651b9","be6648ada0074cb76b5da7854c37cb784c52f989","4a41a1b8adf426959ece8ebed0fccdcd5db1124eb0686c2f590b3b93392429e6","6322a2a4b5dd34ecff3af22c4fac94cf","5679ada30e9cdbdfe62a05448d76e7034489945a","40b1bc34ecaddc7f08ca6399cb2a07520a7203394aa3accb1bb7d94aa21b35d6","3a0f85d811916f66371b9a994472667c","ba251c5f2884e2535a2178509b9065a9be969965","0d6dec29075584af62801306913430c1733882955eedcd9e9a4916b2dae4d457","0bd1d822710ca4cd8612cfcd78a12155","94df55b21bbd7bb82ab269d7840a3188003e5d35","e1f3763092aa779fd291afe9aa18866658966332b13caa57d34d294120e1f608","9d705f6333fc8cb3e75dde04e7a71ca4","cb84313a708723268a0608929887ad16fcf83a26","01e33b20366589b19f66ffdd560538e83fe1a63cab7f29e0a6754bcbb49ec7bb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f69d32157189945fa2bf47a690a8bd62","4f10e10050d3da0b369f6636ede18a418ecab3a0","ea463bf8e502d0ff68736afa3dcbb59c969a6dc5776c0d7d10bb282ec3b62282","de19ea6e9cdf2ac5d22a00d24898532d","0786eb857c20dedb578e181cafba81ef0a097205","562cfbab3c6c4daf3a7f81412c77d5b70402c48aed3f49066cb758742b068afd","c8d12b90e9efd04a2c523efaef3d01d4","abd78cf430d91d07387e7305be6523249af38caa","88cb332eb82f3c086eaa33607a173cf6410bff0b9a21d6692225ffb9bbe877c6","92fd2e7d4dfced8c635fbcb54bb651b9","be6648ada0074cb76b5da7854c37cb784c52f989","4a41a1b8adf426959ece8ebed0fccdcd5db1124eb0686c2f590b3b93392429e6","6322a2a4b5dd34ecff3af22c4fac94cf","5679ada30e9cdbdfe62a05448d76e7034489945a","40b1bc34ecaddc7f08ca6399cb2a07520a7203394aa3accb1bb7d94aa21b35d6","3a0f85d811916f66371b9a994472667c","ba251c5f2884e2535a2178509b9065a9be969965","0d6dec29075584af62801306913430c1733882955eedcd9e9a4916b2dae4d457","0bd1d822710ca4cd8612cfcd78a12155","94df55b21bbd7bb82ab269d7840a3188003e5d35","e1f3763092aa779fd291afe9aa18866658966332b13caa57d34d294120e1f608","9d705f6333fc8cb3e75dde04e7a71ca4","cb84313a708723268a0608929887ad16fcf83a26","01e33b20366589b19f66ffdd560538e83fe1a63cab7f29e0a6754bcbb49ec7bb")
