F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer Security F4SD Agent Computer Security F4SD Agent Computer Security F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer Security F4SD Agent Computer Security F4SD Agent Computer Security F4SD Agent Computer Security F4SD Agent Computer Network F4SD Agent Computer Network F4SD Agent Computer Network F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer F4SD Agent Computer (select #Columns# (from device #KeyFilter#) #Limit#) (select #Columns# (from device #KeyFilter#) #Limit#) (select #Columns# (from device #KeyFilter#) #Limit#) (select #Columns# (from device #KeyFilter#) #Limit#) (select #Columns# (from device #KeyFilter#) #Limit#) (select #Columns# (from device #KeyFilter#) #Limit#) (select #Columns# (from (device_error device) #KeyFilter# (where device_error (eq type (enum "system_crash"))) #TimeFilter#) #Limit#) (select #Columns# (from (device_error device) #KeyFilter# (where device_error (eq type (enum "hard reset"))) #TimeFilter#) #Limit#) (select #Columns# (from (device binary) (with execution #KeyFilter# (where binary(eq executable_name (pattern outlook.exe))) #TimeFilter#)) #Limit#) (select #Columns# (from device (with execution_error #KeyFilter# (where binary (eq application_name (string "Microsoft Outlook"))) (where execution_error (eq type (enum "crash"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with execution_error #KeyFilter# (where binary (eq application_name (string "Microsoft Outlook"))) (where execution_error (eq type (enum "application not responding"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with connection #KeyFilter# (where binary (eq application_name (string "Microsoft Outlook"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with connection #KeyFilter# (where application (eq name (string "Nexthink Collector"))) (where application (eq name (string "Nexthink Coordinator"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from (device binary) (with execution #KeyFilter# (where executable(eq name (string "c4it f4sd agent.exe"))) #TimeFilter#)) #Limit#) (select #Columns# (from device (with execution_error #KeyFilter# (where executable(eq name (string "c4it f4sd agent.exe"))) (where executable(eq name (string "c4it f4sd tray.exe"))) (where execution_error (eq type (enum "crash"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with execution_error #KeyFilter# (where executable(eq name (string "c4it f4sd agent.exe"))) (where executable(eq name (string "c4it f4sd tray.exe"))) (where execution_error (eq type (enum "application not responding"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with connection #KeyFilter# (where executable(eq name (string "c4it f4sd agent.exe"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with execution #KeyFilter# (where executable(eq name (string "c4it f4sd agent.exe"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with device_activity #KeyFilter# #Compute# #TimeFilter#)) #Limit# ) (select #Columns# (from device (with connection #KeyFilter# #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with connection #KeyFilter# (where connection (eq network_interface_type (enum "wifi"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with device_error #KeyFilter# (where device_error (eq type (enum "system_crash"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with device_error #KeyFilter# (where device_error (eq type (enum "hard reset"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with execution_error #KeyFilter# (where execution_error (eq type (enum "crash"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from device (with execution_error #KeyFilter# (where execution_error (eq type (enum "application not responding"))) #Compute# #TimeFilter#)) #Limit#) (select #Columns# (from user #KeyFilter#) #Limit#) (select #Columns# (from user #KeyFilter#) #Limit#) (select #Columns# (from user (where user (ne #"campaign:DEX - Employee sentiment/Last action time" nil)) #KeyFilter#) #Limit#)