index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("B9D403D17C1919EE5AC6F1475B645677A4C03FE9","0926F8DF5A40B58C6574189FFB5C170528A6A34D","9F1C72D2617B13E591A866196A662FEA590D5677","DE0FA1529BC652FF3C10FF16871D88F2D39901A0","A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5","7A57118EE3122C9BDB45CF7A9B2EFD72FE258771","2C0BC274BC2FD9DAB82330B837711355170FC606","3A80A49EFAAC5D839400E4FB8F803243FB39A513","117318262E521A66ABA4605262FA2F8552903217","F3B3CF03801527C24F9059F475A9D87E5392DAE9","3EA3B79834C2C2DBCE0D24C73B022A2FF706B4C6","1CA89010E866FB97047383A7F6C83C00C3F31961","F3D73BE3F4F5393BE1BC1CF81F3041AAD8BE4F8D")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("B9D403D17C1919EE5AC6F1475B645677A4C03FE9","0926F8DF5A40B58C6574189FFB5C170528A6A34D","9F1C72D2617B13E591A866196A662FEA590D5677","DE0FA1529BC652FF3C10FF16871D88F2D39901A0","A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5","7A57118EE3122C9BDB45CF7A9B2EFD72FE258771","2C0BC274BC2FD9DAB82330B837711355170FC606","3A80A49EFAAC5D839400E4FB8F803243FB39A513","117318262E521A66ABA4605262FA2F8552903217","F3B3CF03801527C24F9059F475A9D87E5392DAE9","3EA3B79834C2C2DBCE0D24C73B022A2FF706B4C6","1CA89010E866FB97047383A7F6C83C00C3F31961","F3D73BE3F4F5393BE1BC1CF81F3041AAD8BE4F8D")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("B9D403D17C1919EE5AC6F1475B645677A4C03FE9","0926F8DF5A40B58C6574189FFB5C170528A6A34D","9F1C72D2617B13E591A866196A662FEA590D5677","DE0FA1529BC652FF3C10FF16871D88F2D39901A0","A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5","7A57118EE3122C9BDB45CF7A9B2EFD72FE258771","2C0BC274BC2FD9DAB82330B837711355170FC606","3A80A49EFAAC5D839400E4FB8F803243FB39A513","117318262E521A66ABA4605262FA2F8552903217","F3B3CF03801527C24F9059F475A9D87E5392DAE9","3EA3B79834C2C2DBCE0D24C73B022A2FF706B4C6","1CA89010E866FB97047383A7F6C83C00C3F31961","F3D73BE3F4F5393BE1BC1CF81F3041AAD8BE4F8D")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("B9D403D17C1919EE5AC6F1475B645677A4C03FE9","0926F8DF5A40B58C6574189FFB5C170528A6A34D","9F1C72D2617B13E591A866196A662FEA590D5677","DE0FA1529BC652FF3C10FF16871D88F2D39901A0","A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5","7A57118EE3122C9BDB45CF7A9B2EFD72FE258771","2C0BC274BC2FD9DAB82330B837711355170FC606","3A80A49EFAAC5D839400E4FB8F803243FB39A513","117318262E521A66ABA4605262FA2F8552903217","F3B3CF03801527C24F9059F475A9D87E5392DAE9","3EA3B79834C2C2DBCE0D24C73B022A2FF706B4C6","1CA89010E866FB97047383A7F6C83C00C3F31961","F3D73BE3F4F5393BE1BC1CF81F3041AAD8BE4F8D")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("B9D403D17C1919EE5AC6F1475B645677A4C03FE9","0926F8DF5A40B58C6574189FFB5C170528A6A34D","9F1C72D2617B13E591A866196A662FEA590D5677","DE0FA1529BC652FF3C10FF16871D88F2D39901A0","A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5","7A57118EE3122C9BDB45CF7A9B2EFD72FE258771","2C0BC274BC2FD9DAB82330B837711355170FC606","3A80A49EFAAC5D839400E4FB8F803243FB39A513","117318262E521A66ABA4605262FA2F8552903217","F3B3CF03801527C24F9059F475A9D87E5392DAE9","3EA3B79834C2C2DBCE0D24C73B022A2FF706B4C6","1CA89010E866FB97047383A7F6C83C00C3F31961","F3D73BE3F4F5393BE1BC1CF81F3041AAD8BE4F8D")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("B9D403D17C1919EE5AC6F1475B645677A4C03FE9","0926F8DF5A40B58C6574189FFB5C170528A6A34D","9F1C72D2617B13E591A866196A662FEA590D5677","DE0FA1529BC652FF3C10FF16871D88F2D39901A0","A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5","7A57118EE3122C9BDB45CF7A9B2EFD72FE258771","2C0BC274BC2FD9DAB82330B837711355170FC606","3A80A49EFAAC5D839400E4FB8F803243FB39A513","117318262E521A66ABA4605262FA2F8552903217","F3B3CF03801527C24F9059F475A9D87E5392DAE9","3EA3B79834C2C2DBCE0D24C73B022A2FF706B4C6","1CA89010E866FB97047383A7F6C83C00C3F31961","F3D73BE3F4F5393BE1BC1CF81F3041AAD8BE4F8D")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "www.teamworks455.com" OR destinationhostname CONTAINS "asdfghdsajkl.com" OR destinationhostname CONTAINS "iasudjghnasd.com" OR destinationhostname CONTAINS "kdjwhqejqwij.com" OR destinationhostname CONTAINS "kjdhsasghjds.com" OR destinationhostname CONTAINS "dkisuaggdjhna.com" OR destinationhostname CONTAINS "dquggwjhdmq.com" OR destinationhostname CONTAINS "lkjhgfgsdshja.com" OR destinationhostname CONTAINS "daksjuggdhwa.com" OR destinationhostname CONTAINS "eiqwuggejqw.com" OR destinationhostname CONTAINS "djshggadasj.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "www.teamworks455.com" OR destinationhostname CONTAINS "asdfghdsajkl.com" OR destinationhostname CONTAINS "iasudjghnasd.com" OR destinationhostname CONTAINS "kdjwhqejqwij.com" OR destinationhostname CONTAINS "kjdhsasghjds.com" OR destinationhostname CONTAINS "dkisuaggdjhna.com" OR destinationhostname CONTAINS "dquggwjhdmq.com" OR destinationhostname CONTAINS "lkjhgfgsdshja.com" OR destinationhostname CONTAINS "daksjuggdhwa.com" OR destinationhostname CONTAINS "eiqwuggejqw.com" OR destinationhostname CONTAINS "djshggadasj.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "www.teamworks455.com" OR destinationhostname CONTAINS "asdfghdsajkl.com" OR destinationhostname CONTAINS "iasudjghnasd.com" OR destinationhostname CONTAINS "kdjwhqejqwij.com" OR destinationhostname CONTAINS "kjdhsasghjds.com" OR destinationhostname CONTAINS "dkisuaggdjhna.com" OR destinationhostname CONTAINS "dquggwjhdmq.com" OR destinationhostname CONTAINS "lkjhgfgsdshja.com" OR destinationhostname CONTAINS "daksjuggdhwa.com" OR destinationhostname CONTAINS "eiqwuggejqw.com" OR destinationhostname CONTAINS "djshggadasj.com")
