index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.141.25.168")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("185.141.25.168")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.141.25.168")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.141.25.168")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("185.141.25.168")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810","652ee7b470c393c1de1dfdcd8cb834ff0dd23c93646739f1f475f71a6c138edd","9f99cf2bdf2e5dbd2ccc3c09ddcc2b4cba11a860b7e74c17a1cdea6910737b11","654d19620d48ff1f00a4d91566e705912d515c17d7615d0625f6b4ace80f8e3a","79aee7a4459d49dc6dfebf1a45d32ccc3769a1e5c1f231777ced3769607ba9c1","da68dc9d5571ef4729adda86f5a21d3f4478ddbae2de937f34f57f450d8a3c76","3bab2947305c00df66cb4d6aaef006f10aca348c17aa2fd28e53363a08b7ec68","0243ac9f6148098de0b5f215c6e9802663284432492d29f7443a5dc36cb9aab5","e380c4b48cec730db1e32cc6a5bea752549bf0b1fb5e7d4a20776ef4f39a8842","fdd8c27495fbaa855603df4f774fe86bbc21743f59fd039f734feb07704805bd","7a15e51e5dc6a9bfe0104f731e7def854abca5154317198dad73f32e1aead740","c869261902a1364dd3decb2f8dce54b81621f20abd7204a427a3365c8dcc9d78","503276929ce5c56c626eaa5c3aca0e0160743bf3c8d415042dc3f9bb8c8b44a2","847d0057ade1d6ca0fedc5f48e76dd076fa4611deb77c490899f49701e87b6dd","14584a716c5378405cba188dd60cec03571965329f52cfbd8c54116fa2d59377")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810","652ee7b470c393c1de1dfdcd8cb834ff0dd23c93646739f1f475f71a6c138edd","9f99cf2bdf2e5dbd2ccc3c09ddcc2b4cba11a860b7e74c17a1cdea6910737b11","654d19620d48ff1f00a4d91566e705912d515c17d7615d0625f6b4ace80f8e3a","79aee7a4459d49dc6dfebf1a45d32ccc3769a1e5c1f231777ced3769607ba9c1","da68dc9d5571ef4729adda86f5a21d3f4478ddbae2de937f34f57f450d8a3c76","3bab2947305c00df66cb4d6aaef006f10aca348c17aa2fd28e53363a08b7ec68","0243ac9f6148098de0b5f215c6e9802663284432492d29f7443a5dc36cb9aab5","e380c4b48cec730db1e32cc6a5bea752549bf0b1fb5e7d4a20776ef4f39a8842","fdd8c27495fbaa855603df4f774fe86bbc21743f59fd039f734feb07704805bd","7a15e51e5dc6a9bfe0104f731e7def854abca5154317198dad73f32e1aead740","c869261902a1364dd3decb2f8dce54b81621f20abd7204a427a3365c8dcc9d78","503276929ce5c56c626eaa5c3aca0e0160743bf3c8d415042dc3f9bb8c8b44a2","847d0057ade1d6ca0fedc5f48e76dd076fa4611deb77c490899f49701e87b6dd","14584a716c5378405cba188dd60cec03571965329f52cfbd8c54116fa2d59377")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810","652ee7b470c393c1de1dfdcd8cb834ff0dd23c93646739f1f475f71a6c138edd","9f99cf2bdf2e5dbd2ccc3c09ddcc2b4cba11a860b7e74c17a1cdea6910737b11","654d19620d48ff1f00a4d91566e705912d515c17d7615d0625f6b4ace80f8e3a","79aee7a4459d49dc6dfebf1a45d32ccc3769a1e5c1f231777ced3769607ba9c1","da68dc9d5571ef4729adda86f5a21d3f4478ddbae2de937f34f57f450d8a3c76","3bab2947305c00df66cb4d6aaef006f10aca348c17aa2fd28e53363a08b7ec68","0243ac9f6148098de0b5f215c6e9802663284432492d29f7443a5dc36cb9aab5","e380c4b48cec730db1e32cc6a5bea752549bf0b1fb5e7d4a20776ef4f39a8842","fdd8c27495fbaa855603df4f774fe86bbc21743f59fd039f734feb07704805bd","7a15e51e5dc6a9bfe0104f731e7def854abca5154317198dad73f32e1aead740","c869261902a1364dd3decb2f8dce54b81621f20abd7204a427a3365c8dcc9d78","503276929ce5c56c626eaa5c3aca0e0160743bf3c8d415042dc3f9bb8c8b44a2","847d0057ade1d6ca0fedc5f48e76dd076fa4611deb77c490899f49701e87b6dd","14584a716c5378405cba188dd60cec03571965329f52cfbd8c54116fa2d59377")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810","652ee7b470c393c1de1dfdcd8cb834ff0dd23c93646739f1f475f71a6c138edd","9f99cf2bdf2e5dbd2ccc3c09ddcc2b4cba11a860b7e74c17a1cdea6910737b11","654d19620d48ff1f00a4d91566e705912d515c17d7615d0625f6b4ace80f8e3a","79aee7a4459d49dc6dfebf1a45d32ccc3769a1e5c1f231777ced3769607ba9c1","da68dc9d5571ef4729adda86f5a21d3f4478ddbae2de937f34f57f450d8a3c76","3bab2947305c00df66cb4d6aaef006f10aca348c17aa2fd28e53363a08b7ec68","0243ac9f6148098de0b5f215c6e9802663284432492d29f7443a5dc36cb9aab5","e380c4b48cec730db1e32cc6a5bea752549bf0b1fb5e7d4a20776ef4f39a8842","fdd8c27495fbaa855603df4f774fe86bbc21743f59fd039f734feb07704805bd","7a15e51e5dc6a9bfe0104f731e7def854abca5154317198dad73f32e1aead740","c869261902a1364dd3decb2f8dce54b81621f20abd7204a427a3365c8dcc9d78","503276929ce5c56c626eaa5c3aca0e0160743bf3c8d415042dc3f9bb8c8b44a2","847d0057ade1d6ca0fedc5f48e76dd076fa4611deb77c490899f49701e87b6dd","14584a716c5378405cba188dd60cec03571965329f52cfbd8c54116fa2d59377")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810","652ee7b470c393c1de1dfdcd8cb834ff0dd23c93646739f1f475f71a6c138edd","9f99cf2bdf2e5dbd2ccc3c09ddcc2b4cba11a860b7e74c17a1cdea6910737b11","654d19620d48ff1f00a4d91566e705912d515c17d7615d0625f6b4ace80f8e3a","79aee7a4459d49dc6dfebf1a45d32ccc3769a1e5c1f231777ced3769607ba9c1","da68dc9d5571ef4729adda86f5a21d3f4478ddbae2de937f34f57f450d8a3c76","3bab2947305c00df66cb4d6aaef006f10aca348c17aa2fd28e53363a08b7ec68","0243ac9f6148098de0b5f215c6e9802663284432492d29f7443a5dc36cb9aab5","e380c4b48cec730db1e32cc6a5bea752549bf0b1fb5e7d4a20776ef4f39a8842","fdd8c27495fbaa855603df4f774fe86bbc21743f59fd039f734feb07704805bd","7a15e51e5dc6a9bfe0104f731e7def854abca5154317198dad73f32e1aead740","c869261902a1364dd3decb2f8dce54b81621f20abd7204a427a3365c8dcc9d78","503276929ce5c56c626eaa5c3aca0e0160743bf3c8d415042dc3f9bb8c8b44a2","847d0057ade1d6ca0fedc5f48e76dd076fa4611deb77c490899f49701e87b6dd","14584a716c5378405cba188dd60cec03571965329f52cfbd8c54116fa2d59377")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810","652ee7b470c393c1de1dfdcd8cb834ff0dd23c93646739f1f475f71a6c138edd","9f99cf2bdf2e5dbd2ccc3c09ddcc2b4cba11a860b7e74c17a1cdea6910737b11","654d19620d48ff1f00a4d91566e705912d515c17d7615d0625f6b4ace80f8e3a","79aee7a4459d49dc6dfebf1a45d32ccc3769a1e5c1f231777ced3769607ba9c1","da68dc9d5571ef4729adda86f5a21d3f4478ddbae2de937f34f57f450d8a3c76","3bab2947305c00df66cb4d6aaef006f10aca348c17aa2fd28e53363a08b7ec68","0243ac9f6148098de0b5f215c6e9802663284432492d29f7443a5dc36cb9aab5","e380c4b48cec730db1e32cc6a5bea752549bf0b1fb5e7d4a20776ef4f39a8842","fdd8c27495fbaa855603df4f774fe86bbc21743f59fd039f734feb07704805bd","7a15e51e5dc6a9bfe0104f731e7def854abca5154317198dad73f32e1aead740","c869261902a1364dd3decb2f8dce54b81621f20abd7204a427a3365c8dcc9d78","503276929ce5c56c626eaa5c3aca0e0160743bf3c8d415042dc3f9bb8c8b44a2","847d0057ade1d6ca0fedc5f48e76dd076fa4611deb77c490899f49701e87b6dd","14584a716c5378405cba188dd60cec03571965329f52cfbd8c54116fa2d59377")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "https://u2wgg22a111ssy.space" OR destinationhostname CONTAINS "https://www.0zr33n33fo.space" OR destinationhostname CONTAINS "http://vk-o2vox-n.pp.ua" OR destinationhostname CONTAINS "https://m0troppm.site" OR destinationhostname CONTAINS "https://apooow4.space" OR destinationhostname CONTAINS "https://ga345ss34u.space")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "https://u2wgg22a111ssy.space" OR destinationhostname CONTAINS "https://www.0zr33n33fo.space" OR destinationhostname CONTAINS "http://vk-o2vox-n.pp.ua" OR destinationhostname CONTAINS "https://m0troppm.site" OR destinationhostname CONTAINS "https://apooow4.space" OR destinationhostname CONTAINS "https://ga345ss34u.space")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "https://u2wgg22a111ssy.space" OR destinationhostname CONTAINS "https://www.0zr33n33fo.space" OR destinationhostname CONTAINS "http://vk-o2vox-n.pp.ua" OR destinationhostname CONTAINS "https://m0troppm.site" OR destinationhostname CONTAINS "https://apooow4.space" OR destinationhostname CONTAINS "https://ga345ss34u.space")
