index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("77be0dd6570301acac3634801676b5d7","de80e1d7d9f5b1c64ec9f8d4f5063989","a4838dd31c672122441bebcbf7e9d277")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("77be0dd6570301acac3634801676b5d7","de80e1d7d9f5b1c64ec9f8d4f5063989","a4838dd31c672122441bebcbf7e9d277")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("77be0dd6570301acac3634801676b5d7","de80e1d7d9f5b1c64ec9f8d4f5063989","a4838dd31c672122441bebcbf7e9d277")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("77be0dd6570301acac3634801676b5d7","de80e1d7d9f5b1c64ec9f8d4f5063989","a4838dd31c672122441bebcbf7e9d277")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("77be0dd6570301acac3634801676b5d7","de80e1d7d9f5b1c64ec9f8d4f5063989","a4838dd31c672122441bebcbf7e9d277")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("77be0dd6570301acac3634801676b5d7","de80e1d7d9f5b1c64ec9f8d4f5063989","a4838dd31c672122441bebcbf7e9d277")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://tren0.ru/6jhuy675rt.exe","http://divelerevol.com/8/forum.php","http://polionallas.ru/8/forum.php","http://cametateleb.ru/8/forum.php")
