index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("97d6b194da410db82d9974aec984cff8ac0a6ad59ec72b79d4b2a4672b5aa8aa","46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d","a17bf4533d7ec677a0d4bdae19e41ff2","997af06dda7a3c6d1be2f8cac866c78c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("97d6b194da410db82d9974aec984cff8ac0a6ad59ec72b79d4b2a4672b5aa8aa","46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d","a17bf4533d7ec677a0d4bdae19e41ff2","997af06dda7a3c6d1be2f8cac866c78c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("97d6b194da410db82d9974aec984cff8ac0a6ad59ec72b79d4b2a4672b5aa8aa","46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d","a17bf4533d7ec677a0d4bdae19e41ff2","997af06dda7a3c6d1be2f8cac866c78c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("97d6b194da410db82d9974aec984cff8ac0a6ad59ec72b79d4b2a4672b5aa8aa","46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d","a17bf4533d7ec677a0d4bdae19e41ff2","997af06dda7a3c6d1be2f8cac866c78c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("97d6b194da410db82d9974aec984cff8ac0a6ad59ec72b79d4b2a4672b5aa8aa","46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d","a17bf4533d7ec677a0d4bdae19e41ff2","997af06dda7a3c6d1be2f8cac866c78c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("97d6b194da410db82d9974aec984cff8ac0a6ad59ec72b79d4b2a4672b5aa8aa","46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d","a17bf4533d7ec677a0d4bdae19e41ff2","997af06dda7a3c6d1be2f8cac866c78c")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("www.iregentos.info/09rb/")
