index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("86.110.32.167:80","179.43.187.197","2.56.56.78","209.141.59.56")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("cca00b32d610becf3c5ae9e99ce86a320d5dac87","eb6bbfe8d2860f1ee1b269157d00bfa0c0808932","01dc59199691ce32fd9ae77e90dad70647337c25","97d5d30a4591df308fd62fa7ffd30ff4e7e4fab9","e9aa2ce4923dd9e68b796b914a12ef298bff7fe9","251b02ea2a61b3e167253546f01f37b837ad8cda","fa10e8b6047fa309a73d99ec139627fd6e1debe1","154fc9ea3b0156fbcdcb6e7f5ba849c544a4adfd","0c9ddad09cf02c72435a76066de1b85a2f5cf479","b4af080ad590470eefaadc41f777a2d196c5b0ba","87ef2fd66fdce6f6dcf3f96a7146f44836c7215d","3c2f4fcd66ca59568f89eb9300bb3aa528015e1c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cca00b32d610becf3c5ae9e99ce86a320d5dac87","eb6bbfe8d2860f1ee1b269157d00bfa0c0808932","01dc59199691ce32fd9ae77e90dad70647337c25","97d5d30a4591df308fd62fa7ffd30ff4e7e4fab9","e9aa2ce4923dd9e68b796b914a12ef298bff7fe9","251b02ea2a61b3e167253546f01f37b837ad8cda","fa10e8b6047fa309a73d99ec139627fd6e1debe1","154fc9ea3b0156fbcdcb6e7f5ba849c544a4adfd","0c9ddad09cf02c72435a76066de1b85a2f5cf479","b4af080ad590470eefaadc41f777a2d196c5b0ba","87ef2fd66fdce6f6dcf3f96a7146f44836c7215d","3c2f4fcd66ca59568f89eb9300bb3aa528015e1c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cca00b32d610becf3c5ae9e99ce86a320d5dac87","eb6bbfe8d2860f1ee1b269157d00bfa0c0808932","01dc59199691ce32fd9ae77e90dad70647337c25","97d5d30a4591df308fd62fa7ffd30ff4e7e4fab9","e9aa2ce4923dd9e68b796b914a12ef298bff7fe9","251b02ea2a61b3e167253546f01f37b837ad8cda","fa10e8b6047fa309a73d99ec139627fd6e1debe1","154fc9ea3b0156fbcdcb6e7f5ba849c544a4adfd","0c9ddad09cf02c72435a76066de1b85a2f5cf479","b4af080ad590470eefaadc41f777a2d196c5b0ba","87ef2fd66fdce6f6dcf3f96a7146f44836c7215d","3c2f4fcd66ca59568f89eb9300bb3aa528015e1c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("cca00b32d610becf3c5ae9e99ce86a320d5dac87","eb6bbfe8d2860f1ee1b269157d00bfa0c0808932","01dc59199691ce32fd9ae77e90dad70647337c25","97d5d30a4591df308fd62fa7ffd30ff4e7e4fab9","e9aa2ce4923dd9e68b796b914a12ef298bff7fe9","251b02ea2a61b3e167253546f01f37b837ad8cda","fa10e8b6047fa309a73d99ec139627fd6e1debe1","154fc9ea3b0156fbcdcb6e7f5ba849c544a4adfd","0c9ddad09cf02c72435a76066de1b85a2f5cf479","b4af080ad590470eefaadc41f777a2d196c5b0ba","87ef2fd66fdce6f6dcf3f96a7146f44836c7215d","3c2f4fcd66ca59568f89eb9300bb3aa528015e1c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cca00b32d610becf3c5ae9e99ce86a320d5dac87","eb6bbfe8d2860f1ee1b269157d00bfa0c0808932","01dc59199691ce32fd9ae77e90dad70647337c25","97d5d30a4591df308fd62fa7ffd30ff4e7e4fab9","e9aa2ce4923dd9e68b796b914a12ef298bff7fe9","251b02ea2a61b3e167253546f01f37b837ad8cda","fa10e8b6047fa309a73d99ec139627fd6e1debe1","154fc9ea3b0156fbcdcb6e7f5ba849c544a4adfd","0c9ddad09cf02c72435a76066de1b85a2f5cf479","b4af080ad590470eefaadc41f777a2d196c5b0ba","87ef2fd66fdce6f6dcf3f96a7146f44836c7215d","3c2f4fcd66ca59568f89eb9300bb3aa528015e1c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cca00b32d610becf3c5ae9e99ce86a320d5dac87","eb6bbfe8d2860f1ee1b269157d00bfa0c0808932","01dc59199691ce32fd9ae77e90dad70647337c25","97d5d30a4591df308fd62fa7ffd30ff4e7e4fab9","e9aa2ce4923dd9e68b796b914a12ef298bff7fe9","251b02ea2a61b3e167253546f01f37b837ad8cda","fa10e8b6047fa309a73d99ec139627fd6e1debe1","154fc9ea3b0156fbcdcb6e7f5ba849c544a4adfd","0c9ddad09cf02c72435a76066de1b85a2f5cf479","b4af080ad590470eefaadc41f777a2d196c5b0ba","87ef2fd66fdce6f6dcf3f96a7146f44836c7215d","3c2f4fcd66ca59568f89eb9300bb3aa528015e1c")
