index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("139.180.217.203")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("139.180.217.203")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("139.180.217.203")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("139.180.217.203")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("139.180.217.203")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "service.trendmrcio.com" OR destinationhostname CONTAINS "api.rogerscorp.org" OR destinationhostname CONTAINS "api.sophosantivirus.ga" OR destinationhostname CONTAINS "apicon.nvidialab.us" OR destinationhostname CONTAINS "w2zmii7kjb81pfj0ped16kg8szyvmk.burpcollaborator.net")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "service.trendmrcio.com" OR destinationhostname CONTAINS "api.rogerscorp.org" OR destinationhostname CONTAINS "api.sophosantivirus.ga" OR destinationhostname CONTAINS "apicon.nvidialab.us" OR destinationhostname CONTAINS "w2zmii7kjb81pfj0ped16kg8szyvmk.burpcollaborator.net")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "service.trendmrcio.com" OR destinationhostname CONTAINS "api.rogerscorp.org" OR destinationhostname CONTAINS "api.sophosantivirus.ga" OR destinationhostname CONTAINS "apicon.nvidialab.us" OR destinationhostname CONTAINS "w2zmii7kjb81pfj0ped16kg8szyvmk.burpcollaborator.net")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("service.trendmrcio.com","api.rogerscorp.org","api.sophosantivirus.ga","apicon.nvidialab.us","w2zmii7kjb81pfj0ped16kg8szyvmk.burpcollaborator.net")
