index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c004d38310f828f384f4360591b2c090","a2768bd2301f387a40cd9cbfea05af2f5a68791dce758e5ba9db29ff29e74f57","96abad6cc44497291f8398a78389f064","3f6b8214ecf761a419ca664c022c68d10aa3d6e905aa539796821a0083c0a52e","913ddf732caba6509fe9d9c16616c903","2be03184f699daac92ab4b7421951eec990745886af1965beab7973a7693eb1a","c31cdb1b99a30fa755ed575d5f0e0f86","11e8ce8f0dc20175e1bd324571cdf818bf52cc7b81091d7570d9443cd41bdb58","4f89fddea85c6b426b7a2f09990cc44e","b000437b1118009a578b0c59b1e2561f384cd322717e979c67d9cb58f8a582e5","601403011f517fe701353497377fbe97","89daf5fda8fb172565b987f5ef1291d42e5d7e42d3ad643006c958c624e7952a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c004d38310f828f384f4360591b2c090","a2768bd2301f387a40cd9cbfea05af2f5a68791dce758e5ba9db29ff29e74f57","96abad6cc44497291f8398a78389f064","3f6b8214ecf761a419ca664c022c68d10aa3d6e905aa539796821a0083c0a52e","913ddf732caba6509fe9d9c16616c903","2be03184f699daac92ab4b7421951eec990745886af1965beab7973a7693eb1a","c31cdb1b99a30fa755ed575d5f0e0f86","11e8ce8f0dc20175e1bd324571cdf818bf52cc7b81091d7570d9443cd41bdb58","4f89fddea85c6b426b7a2f09990cc44e","b000437b1118009a578b0c59b1e2561f384cd322717e979c67d9cb58f8a582e5","601403011f517fe701353497377fbe97","89daf5fda8fb172565b987f5ef1291d42e5d7e42d3ad643006c958c624e7952a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c004d38310f828f384f4360591b2c090","a2768bd2301f387a40cd9cbfea05af2f5a68791dce758e5ba9db29ff29e74f57","96abad6cc44497291f8398a78389f064","3f6b8214ecf761a419ca664c022c68d10aa3d6e905aa539796821a0083c0a52e","913ddf732caba6509fe9d9c16616c903","2be03184f699daac92ab4b7421951eec990745886af1965beab7973a7693eb1a","c31cdb1b99a30fa755ed575d5f0e0f86","11e8ce8f0dc20175e1bd324571cdf818bf52cc7b81091d7570d9443cd41bdb58","4f89fddea85c6b426b7a2f09990cc44e","b000437b1118009a578b0c59b1e2561f384cd322717e979c67d9cb58f8a582e5","601403011f517fe701353497377fbe97","89daf5fda8fb172565b987f5ef1291d42e5d7e42d3ad643006c958c624e7952a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c004d38310f828f384f4360591b2c090","a2768bd2301f387a40cd9cbfea05af2f5a68791dce758e5ba9db29ff29e74f57","96abad6cc44497291f8398a78389f064","3f6b8214ecf761a419ca664c022c68d10aa3d6e905aa539796821a0083c0a52e","913ddf732caba6509fe9d9c16616c903","2be03184f699daac92ab4b7421951eec990745886af1965beab7973a7693eb1a","c31cdb1b99a30fa755ed575d5f0e0f86","11e8ce8f0dc20175e1bd324571cdf818bf52cc7b81091d7570d9443cd41bdb58","4f89fddea85c6b426b7a2f09990cc44e","b000437b1118009a578b0c59b1e2561f384cd322717e979c67d9cb58f8a582e5","601403011f517fe701353497377fbe97","89daf5fda8fb172565b987f5ef1291d42e5d7e42d3ad643006c958c624e7952a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c004d38310f828f384f4360591b2c090","a2768bd2301f387a40cd9cbfea05af2f5a68791dce758e5ba9db29ff29e74f57","96abad6cc44497291f8398a78389f064","3f6b8214ecf761a419ca664c022c68d10aa3d6e905aa539796821a0083c0a52e","913ddf732caba6509fe9d9c16616c903","2be03184f699daac92ab4b7421951eec990745886af1965beab7973a7693eb1a","c31cdb1b99a30fa755ed575d5f0e0f86","11e8ce8f0dc20175e1bd324571cdf818bf52cc7b81091d7570d9443cd41bdb58","4f89fddea85c6b426b7a2f09990cc44e","b000437b1118009a578b0c59b1e2561f384cd322717e979c67d9cb58f8a582e5","601403011f517fe701353497377fbe97","89daf5fda8fb172565b987f5ef1291d42e5d7e42d3ad643006c958c624e7952a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c004d38310f828f384f4360591b2c090","a2768bd2301f387a40cd9cbfea05af2f5a68791dce758e5ba9db29ff29e74f57","96abad6cc44497291f8398a78389f064","3f6b8214ecf761a419ca664c022c68d10aa3d6e905aa539796821a0083c0a52e","913ddf732caba6509fe9d9c16616c903","2be03184f699daac92ab4b7421951eec990745886af1965beab7973a7693eb1a","c31cdb1b99a30fa755ed575d5f0e0f86","11e8ce8f0dc20175e1bd324571cdf818bf52cc7b81091d7570d9443cd41bdb58","4f89fddea85c6b426b7a2f09990cc44e","b000437b1118009a578b0c59b1e2561f384cd322717e979c67d9cb58f8a582e5","601403011f517fe701353497377fbe97","89daf5fda8fb172565b987f5ef1291d42e5d7e42d3ad643006c958c624e7952a")
