change: remove HandleCompareOperatorMustNotExists and use negation of HandleCompareOperatorExists instead

Author: alex-heine

pkg/openSearch/osquery/boolQueryBuilder.go

@@ -291,7 +291,7 @@ func defaultCompareOperators() []CompareOperator {
 		},
 		{
 			Operator: filter.CompareOperatorMustNotExists,
-			Handler:  HandleCompareOperatorMustNotExists, MustCondition: true,
+			Handler:  HandleCompareOperatorExists, MustCondition: false,
 		},
 	}
 }

pkg/openSearch/osquery/compareHandler.go

@@ -158,10 +158,6 @@ func HandleCompareOperatorExists(fieldName string, _ any) (esquery.Mappable, err
 	return esquery.Exists(fieldName), nil
 }
 
-func HandleCompareOperatorMustNotExists(fieldName string, _ any) (esquery.Mappable, error) {
-	return esquery.Bool().MustNot(esquery.Exists(fieldName)), nil
-}
-
 // HandleCompareOperatorBetweenDates constructs an OpenSearch range query for a given date field.
 // It accepts a field name and a field value, which must be a slice of exactly 2 elements, representing the start and end of range. Accepted slice types:
 // - []time.Time,