index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("80.255.3.67")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("80.255.3.67")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("80.255.3.67")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("80.255.3.67")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("80.255.3.67")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("78E82F632856F293BDA86D77D02DF97EDBCDE918","D9F439E7D9EE9450CD504D5791FC73DA7C3F7E2E","CF7A56FD0613F63418B9DF3E2D7852FBB687BE3F","B2263A6688E512D90629A3A621B2EE003B1B959E","13B785493145C85B005E96D5029C20ACCFFE50F2","E2A11F28F9511753698BA5CDBAA70E8141C9DFC3","F67ABC483EE2114D96A90FA0A39496C42EF050B5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("78E82F632856F293BDA86D77D02DF97EDBCDE918","D9F439E7D9EE9450CD504D5791FC73DA7C3F7E2E","CF7A56FD0613F63418B9DF3E2D7852FBB687BE3F","B2263A6688E512D90629A3A621B2EE003B1B959E","13B785493145C85B005E96D5029C20ACCFFE50F2","E2A11F28F9511753698BA5CDBAA70E8141C9DFC3","F67ABC483EE2114D96A90FA0A39496C42EF050B5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("78E82F632856F293BDA86D77D02DF97EDBCDE918","D9F439E7D9EE9450CD504D5791FC73DA7C3F7E2E","CF7A56FD0613F63418B9DF3E2D7852FBB687BE3F","B2263A6688E512D90629A3A621B2EE003B1B959E","13B785493145C85B005E96D5029C20ACCFFE50F2","E2A11F28F9511753698BA5CDBAA70E8141C9DFC3","F67ABC483EE2114D96A90FA0A39496C42EF050B5")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("78E82F632856F293BDA86D77D02DF97EDBCDE918","D9F439E7D9EE9450CD504D5791FC73DA7C3F7E2E","CF7A56FD0613F63418B9DF3E2D7852FBB687BE3F","B2263A6688E512D90629A3A621B2EE003B1B959E","13B785493145C85B005E96D5029C20ACCFFE50F2","E2A11F28F9511753698BA5CDBAA70E8141C9DFC3","F67ABC483EE2114D96A90FA0A39496C42EF050B5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("78E82F632856F293BDA86D77D02DF97EDBCDE918","D9F439E7D9EE9450CD504D5791FC73DA7C3F7E2E","CF7A56FD0613F63418B9DF3E2D7852FBB687BE3F","B2263A6688E512D90629A3A621B2EE003B1B959E","13B785493145C85B005E96D5029C20ACCFFE50F2","E2A11F28F9511753698BA5CDBAA70E8141C9DFC3","F67ABC483EE2114D96A90FA0A39496C42EF050B5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("78E82F632856F293BDA86D77D02DF97EDBCDE918","D9F439E7D9EE9450CD504D5791FC73DA7C3F7E2E","CF7A56FD0613F63418B9DF3E2D7852FBB687BE3F","B2263A6688E512D90629A3A621B2EE003B1B959E","13B785493145C85B005E96D5029C20ACCFFE50F2","E2A11F28F9511753698BA5CDBAA70E8141C9DFC3","F67ABC483EE2114D96A90FA0A39496C42EF050B5")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://request.soundedge.live/access/nasrzolofuju","https://request.soundedge.live/access/birkalirajliruajirjiairuai","https://share.printerjobs.xyz/id45sdjscj/","https://submin.seasonsbackup.xyz/backup/")
