I don't have a system in front of me to check, but I believe that move events have information about both the starting parent folder and the destination parent folder.  If you query with an "or", you should catch events that represent both moves into and out of a particular folder.  Unfortunately, the Audit Trail reporting UI doesn't support "or"s, so you would need to either run two separate queries, or query the reporting database directly.