index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("162.244.80.235","85.93.88.165","185.141.63.120","82.118.21.1","185.178.209.193","195.123.217.36","195.123.222.2","162.244.80.177","185.206.21.82","217.12.202.115","217.12.202.207")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("124ccbfc91951101809fb9a889faa3353f4cf352caac216e446c36be3d1056a2","4bfd58d4e4a6fe5e91b408bc190a24d352124902085f9c2da948ad7d79b72618","b287d96b69b35aeff63b844996ea81b3411eac1b542743110bbbb0d8cb1c5b25","2da8651de0668f740c5b6faa2bf99813a2edfebfd627d2f20c3612ebd6e81a6b","720b9bdcecf8ec1b406e1e7b2e3c3199e3ffb0eac3c815f8255744cccbebe0d7","b386fc6759bcadd03bbaf917c2b289111ca3edc0032753b8bf79fa8240e87bfa","006b9d3d9a3552f18d753673b3249971d51cf7eef026897e1680def8dc365d2b","e70d75ca6431d368a477cf42b672d21254c965b8f0a031dfc9324c148a4fa801","d9bb50d895dfc848555c079510e00ad50d3567412f8c8aa7bc2ce512d9a82ea0","0af50666aa3439e475d4e2e25849b906dbd6d56d110e3a0c843698f6a95b87c4","59a9f0de96eff57768e995b296ae75778a232f30d95a7b7ab5048c621b50c66d","036a4795d259d36b3396cd3a0fd46d4a103337c96fe911f5c362d5682bd58ba9","a25b453cf679a36f9b7611d4b492ba8dc6223b1a1a02fc8c0da4a104dcf4fa12","d29b8160e51dd29474f3464111fc888da8adb2bc2f0d4f29ce71219ffc846bd5","ac07fd904aaf9359967685d75918dcc6dbf9b78296e70fee8d6738e069845132","62e70efef5075232feada6857c97b388ec98e1bb175c501c429117f550a1ad66","456dc28731284188734ef4724d38dca91dcba6c780e6268603365967522cdd6e","b1f51b141ce25288e096972b6d8cea70b4250a1855c0e75878409fbc7da00825","227164b06f201b07a8b82800adcc6a831cadaed6709d1473fd4182858fbd80a5","6f0c6f447a18ad9fd81382b062d16d07eede05a15ab75870c0fdb43d421bb42d","2452cf5c6fccf361fa27131d9b261a60253eef8b96e6e2f524c85beea6488bd0","820bf83f0bb8b1b608a4e90482960f44540fcc15e76b0090750dd2ffad46f746","6fce6b5f101ab504115f1251a842d55c50a046d7fd92d1fe0f42e430900bc8c5","004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf","2e17cff4e2c3c88aa2545455651680f54fc2355eab3b684294652f2fcdbf09cb","f6882df6b751c177dcf9ece5dedc764bd6cbe1d3ad16ff8084ae143105aa1931","040fcbd360c7498756519cb0e687120bd623da80784034ea89178409491b1c44","81792fcbaad868d2e4aca1ed372f4a5abb34372d3265d5712a65cdfe05e42df8","4b7647d08baf3da4f2c7af7deebad4a9892870e07025210d634eb848e45737d7","dc1f4a618e1cdfa8bceae5b251436f148f77b194fbc1c82a73b4c064796de258","2579148e5f020145007ac0dc1be478190137d7915e6fbca2c787b55dbec1d370","96ba6bce158a01c66b4ff87d862a0384e078dc8d515fdaf7fac104d866a11aee","c14f8bc656284715516f26935afe487a1d584f56ffabbcb98f2974f6ca6cd3a4","e16fea1b8874cc6b26e7e2df9697f03f86efa82247bb3b2922f1d05052dbcbb4","e26f1702c232991efaed7177aaafd2f294d2315461a1619cb42541ef0aa8ae77","f20ed03ba228b36064517c1e5fff9ae40d957451a5c6d9a48f9bbe2c3dd881b7","1ef1ff8b1e81815d13bdd293554ddf8b3e57490dd3ef4add7c2837ddc67f9c24","79e41bb5b4edef24742f9e376add4bafdb9cbeb9cb8ae256a36df74694d820b9","eae876886f19ba384f55778634a35a1d975414e83f22f6111e3e792f706301fe","1c4da8bf2089e82a1665f7ac350eeea291dae7509d58dbfc2037ddc1997bfd13","0fd062f86151b9d49d65b8f12c52737600bff8bb3462aba7bf23d820bf4d5518","e2f681d316a964686f7d7278cfdd8e513b90caa7593467416baa439778b60b5f","844cc2551f8bbfd505800bd3d135d93064600a55c45894f89f80b81fea3b0fa1","d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("124ccbfc91951101809fb9a889faa3353f4cf352caac216e446c36be3d1056a2","4bfd58d4e4a6fe5e91b408bc190a24d352124902085f9c2da948ad7d79b72618","b287d96b69b35aeff63b844996ea81b3411eac1b542743110bbbb0d8cb1c5b25","2da8651de0668f740c5b6faa2bf99813a2edfebfd627d2f20c3612ebd6e81a6b","720b9bdcecf8ec1b406e1e7b2e3c3199e3ffb0eac3c815f8255744cccbebe0d7","b386fc6759bcadd03bbaf917c2b289111ca3edc0032753b8bf79fa8240e87bfa","006b9d3d9a3552f18d753673b3249971d51cf7eef026897e1680def8dc365d2b","e70d75ca6431d368a477cf42b672d21254c965b8f0a031dfc9324c148a4fa801","d9bb50d895dfc848555c079510e00ad50d3567412f8c8aa7bc2ce512d9a82ea0","0af50666aa3439e475d4e2e25849b906dbd6d56d110e3a0c843698f6a95b87c4","59a9f0de96eff57768e995b296ae75778a232f30d95a7b7ab5048c621b50c66d","036a4795d259d36b3396cd3a0fd46d4a103337c96fe911f5c362d5682bd58ba9","a25b453cf679a36f9b7611d4b492ba8dc6223b1a1a02fc8c0da4a104dcf4fa12","d29b8160e51dd29474f3464111fc888da8adb2bc2f0d4f29ce71219ffc846bd5","ac07fd904aaf9359967685d75918dcc6dbf9b78296e70fee8d6738e069845132","62e70efef5075232feada6857c97b388ec98e1bb175c501c429117f550a1ad66","456dc28731284188734ef4724d38dca91dcba6c780e6268603365967522cdd6e","b1f51b141ce25288e096972b6d8cea70b4250a1855c0e75878409fbc7da00825","227164b06f201b07a8b82800adcc6a831cadaed6709d1473fd4182858fbd80a5","6f0c6f447a18ad9fd81382b062d16d07eede05a15ab75870c0fdb43d421bb42d","2452cf5c6fccf361fa27131d9b261a60253eef8b96e6e2f524c85beea6488bd0","820bf83f0bb8b1b608a4e90482960f44540fcc15e76b0090750dd2ffad46f746","6fce6b5f101ab504115f1251a842d55c50a046d7fd92d1fe0f42e430900bc8c5","004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf","2e17cff4e2c3c88aa2545455651680f54fc2355eab3b684294652f2fcdbf09cb","f6882df6b751c177dcf9ece5dedc764bd6cbe1d3ad16ff8084ae143105aa1931","040fcbd360c7498756519cb0e687120bd623da80784034ea89178409491b1c44","81792fcbaad868d2e4aca1ed372f4a5abb34372d3265d5712a65cdfe05e42df8","4b7647d08baf3da4f2c7af7deebad4a9892870e07025210d634eb848e45737d7","dc1f4a618e1cdfa8bceae5b251436f148f77b194fbc1c82a73b4c064796de258","2579148e5f020145007ac0dc1be478190137d7915e6fbca2c787b55dbec1d370","96ba6bce158a01c66b4ff87d862a0384e078dc8d515fdaf7fac104d866a11aee","c14f8bc656284715516f26935afe487a1d584f56ffabbcb98f2974f6ca6cd3a4","e16fea1b8874cc6b26e7e2df9697f03f86efa82247bb3b2922f1d05052dbcbb4","e26f1702c232991efaed7177aaafd2f294d2315461a1619cb42541ef0aa8ae77","f20ed03ba228b36064517c1e5fff9ae40d957451a5c6d9a48f9bbe2c3dd881b7","1ef1ff8b1e81815d13bdd293554ddf8b3e57490dd3ef4add7c2837ddc67f9c24","79e41bb5b4edef24742f9e376add4bafdb9cbeb9cb8ae256a36df74694d820b9","eae876886f19ba384f55778634a35a1d975414e83f22f6111e3e792f706301fe","1c4da8bf2089e82a1665f7ac350eeea291dae7509d58dbfc2037ddc1997bfd13","0fd062f86151b9d49d65b8f12c52737600bff8bb3462aba7bf23d820bf4d5518","e2f681d316a964686f7d7278cfdd8e513b90caa7593467416baa439778b60b5f","844cc2551f8bbfd505800bd3d135d93064600a55c45894f89f80b81fea3b0fa1","d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("124ccbfc91951101809fb9a889faa3353f4cf352caac216e446c36be3d1056a2","4bfd58d4e4a6fe5e91b408bc190a24d352124902085f9c2da948ad7d79b72618","b287d96b69b35aeff63b844996ea81b3411eac1b542743110bbbb0d8cb1c5b25","2da8651de0668f740c5b6faa2bf99813a2edfebfd627d2f20c3612ebd6e81a6b","720b9bdcecf8ec1b406e1e7b2e3c3199e3ffb0eac3c815f8255744cccbebe0d7","b386fc6759bcadd03bbaf917c2b289111ca3edc0032753b8bf79fa8240e87bfa","006b9d3d9a3552f18d753673b3249971d51cf7eef026897e1680def8dc365d2b","e70d75ca6431d368a477cf42b672d21254c965b8f0a031dfc9324c148a4fa801","d9bb50d895dfc848555c079510e00ad50d3567412f8c8aa7bc2ce512d9a82ea0","0af50666aa3439e475d4e2e25849b906dbd6d56d110e3a0c843698f6a95b87c4","59a9f0de96eff57768e995b296ae75778a232f30d95a7b7ab5048c621b50c66d","036a4795d259d36b3396cd3a0fd46d4a103337c96fe911f5c362d5682bd58ba9","a25b453cf679a36f9b7611d4b492ba8dc6223b1a1a02fc8c0da4a104dcf4fa12","d29b8160e51dd29474f3464111fc888da8adb2bc2f0d4f29ce71219ffc846bd5","ac07fd904aaf9359967685d75918dcc6dbf9b78296e70fee8d6738e069845132","62e70efef5075232feada6857c97b388ec98e1bb175c501c429117f550a1ad66","456dc28731284188734ef4724d38dca91dcba6c780e6268603365967522cdd6e","b1f51b141ce25288e096972b6d8cea70b4250a1855c0e75878409fbc7da00825","227164b06f201b07a8b82800adcc6a831cadaed6709d1473fd4182858fbd80a5","6f0c6f447a18ad9fd81382b062d16d07eede05a15ab75870c0fdb43d421bb42d","2452cf5c6fccf361fa27131d9b261a60253eef8b96e6e2f524c85beea6488bd0","820bf83f0bb8b1b608a4e90482960f44540fcc15e76b0090750dd2ffad46f746","6fce6b5f101ab504115f1251a842d55c50a046d7fd92d1fe0f42e430900bc8c5","004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf","2e17cff4e2c3c88aa2545455651680f54fc2355eab3b684294652f2fcdbf09cb","f6882df6b751c177dcf9ece5dedc764bd6cbe1d3ad16ff8084ae143105aa1931","040fcbd360c7498756519cb0e687120bd623da80784034ea89178409491b1c44","81792fcbaad868d2e4aca1ed372f4a5abb34372d3265d5712a65cdfe05e42df8","4b7647d08baf3da4f2c7af7deebad4a9892870e07025210d634eb848e45737d7","dc1f4a618e1cdfa8bceae5b251436f148f77b194fbc1c82a73b4c064796de258","2579148e5f020145007ac0dc1be478190137d7915e6fbca2c787b55dbec1d370","96ba6bce158a01c66b4ff87d862a0384e078dc8d515fdaf7fac104d866a11aee","c14f8bc656284715516f26935afe487a1d584f56ffabbcb98f2974f6ca6cd3a4","e16fea1b8874cc6b26e7e2df9697f03f86efa82247bb3b2922f1d05052dbcbb4","e26f1702c232991efaed7177aaafd2f294d2315461a1619cb42541ef0aa8ae77","f20ed03ba228b36064517c1e5fff9ae40d957451a5c6d9a48f9bbe2c3dd881b7","1ef1ff8b1e81815d13bdd293554ddf8b3e57490dd3ef4add7c2837ddc67f9c24","79e41bb5b4edef24742f9e376add4bafdb9cbeb9cb8ae256a36df74694d820b9","eae876886f19ba384f55778634a35a1d975414e83f22f6111e3e792f706301fe","1c4da8bf2089e82a1665f7ac350eeea291dae7509d58dbfc2037ddc1997bfd13","0fd062f86151b9d49d65b8f12c52737600bff8bb3462aba7bf23d820bf4d5518","e2f681d316a964686f7d7278cfdd8e513b90caa7593467416baa439778b60b5f","844cc2551f8bbfd505800bd3d135d93064600a55c45894f89f80b81fea3b0fa1","d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("124ccbfc91951101809fb9a889faa3353f4cf352caac216e446c36be3d1056a2","4bfd58d4e4a6fe5e91b408bc190a24d352124902085f9c2da948ad7d79b72618","b287d96b69b35aeff63b844996ea81b3411eac1b542743110bbbb0d8cb1c5b25","2da8651de0668f740c5b6faa2bf99813a2edfebfd627d2f20c3612ebd6e81a6b","720b9bdcecf8ec1b406e1e7b2e3c3199e3ffb0eac3c815f8255744cccbebe0d7","b386fc6759bcadd03bbaf917c2b289111ca3edc0032753b8bf79fa8240e87bfa","006b9d3d9a3552f18d753673b3249971d51cf7eef026897e1680def8dc365d2b","e70d75ca6431d368a477cf42b672d21254c965b8f0a031dfc9324c148a4fa801","d9bb50d895dfc848555c079510e00ad50d3567412f8c8aa7bc2ce512d9a82ea0","0af50666aa3439e475d4e2e25849b906dbd6d56d110e3a0c843698f6a95b87c4","59a9f0de96eff57768e995b296ae75778a232f30d95a7b7ab5048c621b50c66d","036a4795d259d36b3396cd3a0fd46d4a103337c96fe911f5c362d5682bd58ba9","a25b453cf679a36f9b7611d4b492ba8dc6223b1a1a02fc8c0da4a104dcf4fa12","d29b8160e51dd29474f3464111fc888da8adb2bc2f0d4f29ce71219ffc846bd5","ac07fd904aaf9359967685d75918dcc6dbf9b78296e70fee8d6738e069845132","62e70efef5075232feada6857c97b388ec98e1bb175c501c429117f550a1ad66","456dc28731284188734ef4724d38dca91dcba6c780e6268603365967522cdd6e","b1f51b141ce25288e096972b6d8cea70b4250a1855c0e75878409fbc7da00825","227164b06f201b07a8b82800adcc6a831cadaed6709d1473fd4182858fbd80a5","6f0c6f447a18ad9fd81382b062d16d07eede05a15ab75870c0fdb43d421bb42d","2452cf5c6fccf361fa27131d9b261a60253eef8b96e6e2f524c85beea6488bd0","820bf83f0bb8b1b608a4e90482960f44540fcc15e76b0090750dd2ffad46f746","6fce6b5f101ab504115f1251a842d55c50a046d7fd92d1fe0f42e430900bc8c5","004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf","2e17cff4e2c3c88aa2545455651680f54fc2355eab3b684294652f2fcdbf09cb","f6882df6b751c177dcf9ece5dedc764bd6cbe1d3ad16ff8084ae143105aa1931","040fcbd360c7498756519cb0e687120bd623da80784034ea89178409491b1c44","81792fcbaad868d2e4aca1ed372f4a5abb34372d3265d5712a65cdfe05e42df8","4b7647d08baf3da4f2c7af7deebad4a9892870e07025210d634eb848e45737d7","dc1f4a618e1cdfa8bceae5b251436f148f77b194fbc1c82a73b4c064796de258","2579148e5f020145007ac0dc1be478190137d7915e6fbca2c787b55dbec1d370","96ba6bce158a01c66b4ff87d862a0384e078dc8d515fdaf7fac104d866a11aee","c14f8bc656284715516f26935afe487a1d584f56ffabbcb98f2974f6ca6cd3a4","e16fea1b8874cc6b26e7e2df9697f03f86efa82247bb3b2922f1d05052dbcbb4","e26f1702c232991efaed7177aaafd2f294d2315461a1619cb42541ef0aa8ae77","f20ed03ba228b36064517c1e5fff9ae40d957451a5c6d9a48f9bbe2c3dd881b7","1ef1ff8b1e81815d13bdd293554ddf8b3e57490dd3ef4add7c2837ddc67f9c24","79e41bb5b4edef24742f9e376add4bafdb9cbeb9cb8ae256a36df74694d820b9","eae876886f19ba384f55778634a35a1d975414e83f22f6111e3e792f706301fe","1c4da8bf2089e82a1665f7ac350eeea291dae7509d58dbfc2037ddc1997bfd13","0fd062f86151b9d49d65b8f12c52737600bff8bb3462aba7bf23d820bf4d5518","e2f681d316a964686f7d7278cfdd8e513b90caa7593467416baa439778b60b5f","844cc2551f8bbfd505800bd3d135d93064600a55c45894f89f80b81fea3b0fa1","d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("124ccbfc91951101809fb9a889faa3353f4cf352caac216e446c36be3d1056a2","4bfd58d4e4a6fe5e91b408bc190a24d352124902085f9c2da948ad7d79b72618","b287d96b69b35aeff63b844996ea81b3411eac1b542743110bbbb0d8cb1c5b25","2da8651de0668f740c5b6faa2bf99813a2edfebfd627d2f20c3612ebd6e81a6b","720b9bdcecf8ec1b406e1e7b2e3c3199e3ffb0eac3c815f8255744cccbebe0d7","b386fc6759bcadd03bbaf917c2b289111ca3edc0032753b8bf79fa8240e87bfa","006b9d3d9a3552f18d753673b3249971d51cf7eef026897e1680def8dc365d2b","e70d75ca6431d368a477cf42b672d21254c965b8f0a031dfc9324c148a4fa801","d9bb50d895dfc848555c079510e00ad50d3567412f8c8aa7bc2ce512d9a82ea0","0af50666aa3439e475d4e2e25849b906dbd6d56d110e3a0c843698f6a95b87c4","59a9f0de96eff57768e995b296ae75778a232f30d95a7b7ab5048c621b50c66d","036a4795d259d36b3396cd3a0fd46d4a103337c96fe911f5c362d5682bd58ba9","a25b453cf679a36f9b7611d4b492ba8dc6223b1a1a02fc8c0da4a104dcf4fa12","d29b8160e51dd29474f3464111fc888da8adb2bc2f0d4f29ce71219ffc846bd5","ac07fd904aaf9359967685d75918dcc6dbf9b78296e70fee8d6738e069845132","62e70efef5075232feada6857c97b388ec98e1bb175c501c429117f550a1ad66","456dc28731284188734ef4724d38dca91dcba6c780e6268603365967522cdd6e","b1f51b141ce25288e096972b6d8cea70b4250a1855c0e75878409fbc7da00825","227164b06f201b07a8b82800adcc6a831cadaed6709d1473fd4182858fbd80a5","6f0c6f447a18ad9fd81382b062d16d07eede05a15ab75870c0fdb43d421bb42d","2452cf5c6fccf361fa27131d9b261a60253eef8b96e6e2f524c85beea6488bd0","820bf83f0bb8b1b608a4e90482960f44540fcc15e76b0090750dd2ffad46f746","6fce6b5f101ab504115f1251a842d55c50a046d7fd92d1fe0f42e430900bc8c5","004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf","2e17cff4e2c3c88aa2545455651680f54fc2355eab3b684294652f2fcdbf09cb","f6882df6b751c177dcf9ece5dedc764bd6cbe1d3ad16ff8084ae143105aa1931","040fcbd360c7498756519cb0e687120bd623da80784034ea89178409491b1c44","81792fcbaad868d2e4aca1ed372f4a5abb34372d3265d5712a65cdfe05e42df8","4b7647d08baf3da4f2c7af7deebad4a9892870e07025210d634eb848e45737d7","dc1f4a618e1cdfa8bceae5b251436f148f77b194fbc1c82a73b4c064796de258","2579148e5f020145007ac0dc1be478190137d7915e6fbca2c787b55dbec1d370","96ba6bce158a01c66b4ff87d862a0384e078dc8d515fdaf7fac104d866a11aee","c14f8bc656284715516f26935afe487a1d584f56ffabbcb98f2974f6ca6cd3a4","e16fea1b8874cc6b26e7e2df9697f03f86efa82247bb3b2922f1d05052dbcbb4","e26f1702c232991efaed7177aaafd2f294d2315461a1619cb42541ef0aa8ae77","f20ed03ba228b36064517c1e5fff9ae40d957451a5c6d9a48f9bbe2c3dd881b7","1ef1ff8b1e81815d13bdd293554ddf8b3e57490dd3ef4add7c2837ddc67f9c24","79e41bb5b4edef24742f9e376add4bafdb9cbeb9cb8ae256a36df74694d820b9","eae876886f19ba384f55778634a35a1d975414e83f22f6111e3e792f706301fe","1c4da8bf2089e82a1665f7ac350eeea291dae7509d58dbfc2037ddc1997bfd13","0fd062f86151b9d49d65b8f12c52737600bff8bb3462aba7bf23d820bf4d5518","e2f681d316a964686f7d7278cfdd8e513b90caa7593467416baa439778b60b5f","844cc2551f8bbfd505800bd3d135d93064600a55c45894f89f80b81fea3b0fa1","d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("124ccbfc91951101809fb9a889faa3353f4cf352caac216e446c36be3d1056a2","4bfd58d4e4a6fe5e91b408bc190a24d352124902085f9c2da948ad7d79b72618","b287d96b69b35aeff63b844996ea81b3411eac1b542743110bbbb0d8cb1c5b25","2da8651de0668f740c5b6faa2bf99813a2edfebfd627d2f20c3612ebd6e81a6b","720b9bdcecf8ec1b406e1e7b2e3c3199e3ffb0eac3c815f8255744cccbebe0d7","b386fc6759bcadd03bbaf917c2b289111ca3edc0032753b8bf79fa8240e87bfa","006b9d3d9a3552f18d753673b3249971d51cf7eef026897e1680def8dc365d2b","e70d75ca6431d368a477cf42b672d21254c965b8f0a031dfc9324c148a4fa801","d9bb50d895dfc848555c079510e00ad50d3567412f8c8aa7bc2ce512d9a82ea0","0af50666aa3439e475d4e2e25849b906dbd6d56d110e3a0c843698f6a95b87c4","59a9f0de96eff57768e995b296ae75778a232f30d95a7b7ab5048c621b50c66d","036a4795d259d36b3396cd3a0fd46d4a103337c96fe911f5c362d5682bd58ba9","a25b453cf679a36f9b7611d4b492ba8dc6223b1a1a02fc8c0da4a104dcf4fa12","d29b8160e51dd29474f3464111fc888da8adb2bc2f0d4f29ce71219ffc846bd5","ac07fd904aaf9359967685d75918dcc6dbf9b78296e70fee8d6738e069845132","62e70efef5075232feada6857c97b388ec98e1bb175c501c429117f550a1ad66","456dc28731284188734ef4724d38dca91dcba6c780e6268603365967522cdd6e","b1f51b141ce25288e096972b6d8cea70b4250a1855c0e75878409fbc7da00825","227164b06f201b07a8b82800adcc6a831cadaed6709d1473fd4182858fbd80a5","6f0c6f447a18ad9fd81382b062d16d07eede05a15ab75870c0fdb43d421bb42d","2452cf5c6fccf361fa27131d9b261a60253eef8b96e6e2f524c85beea6488bd0","820bf83f0bb8b1b608a4e90482960f44540fcc15e76b0090750dd2ffad46f746","6fce6b5f101ab504115f1251a842d55c50a046d7fd92d1fe0f42e430900bc8c5","004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf","2e17cff4e2c3c88aa2545455651680f54fc2355eab3b684294652f2fcdbf09cb","f6882df6b751c177dcf9ece5dedc764bd6cbe1d3ad16ff8084ae143105aa1931","040fcbd360c7498756519cb0e687120bd623da80784034ea89178409491b1c44","81792fcbaad868d2e4aca1ed372f4a5abb34372d3265d5712a65cdfe05e42df8","4b7647d08baf3da4f2c7af7deebad4a9892870e07025210d634eb848e45737d7","dc1f4a618e1cdfa8bceae5b251436f148f77b194fbc1c82a73b4c064796de258","2579148e5f020145007ac0dc1be478190137d7915e6fbca2c787b55dbec1d370","96ba6bce158a01c66b4ff87d862a0384e078dc8d515fdaf7fac104d866a11aee","c14f8bc656284715516f26935afe487a1d584f56ffabbcb98f2974f6ca6cd3a4","e16fea1b8874cc6b26e7e2df9697f03f86efa82247bb3b2922f1d05052dbcbb4","e26f1702c232991efaed7177aaafd2f294d2315461a1619cb42541ef0aa8ae77","f20ed03ba228b36064517c1e5fff9ae40d957451a5c6d9a48f9bbe2c3dd881b7","1ef1ff8b1e81815d13bdd293554ddf8b3e57490dd3ef4add7c2837ddc67f9c24","79e41bb5b4edef24742f9e376add4bafdb9cbeb9cb8ae256a36df74694d820b9","eae876886f19ba384f55778634a35a1d975414e83f22f6111e3e792f706301fe","1c4da8bf2089e82a1665f7ac350eeea291dae7509d58dbfc2037ddc1997bfd13","0fd062f86151b9d49d65b8f12c52737600bff8bb3462aba7bf23d820bf4d5518","e2f681d316a964686f7d7278cfdd8e513b90caa7593467416baa439778b60b5f","844cc2551f8bbfd505800bd3d135d93064600a55c45894f89f80b81fea3b0fa1","d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "bestarg.com" OR destinationhostname CONTAINS "gue.life" OR destinationhostname CONTAINS "leafrace.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "bestarg.com" OR destinationhostname CONTAINS "gue.life" OR destinationhostname CONTAINS "leafrace.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "bestarg.com" OR destinationhostname CONTAINS "gue.life" OR destinationhostname CONTAINS "leafrace.com")
