index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("138.124.180.127","185.232.170.24","185.233.80.149","185.53.46.100","206.54.191.37","37.1.213.194","45.142.215.148","5.252.177.215","206.54.190.230","199.80.55.66","207.246.92.213","185.250.151.126")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f778dccfe13b8597a0a9cbb61a204c03f8e166d7f7d5a21dfcf03d56bd2505c3","136095f5f529a891eabd8e04693c182f0701716fe051fa04825b5d2e0c85d1ae","6a3912016f3b41c8cb67a2bc3a6fb2597065d065a809f33288fe838693b7f9a0","0a23ad00d0c62dccae0a759ad4853cd514abd176cfa85ba2665e30f7bdc8bcc0","09189108547ebf046c47f01f4645667e6816a126355ee963d5ad7b91167e4290")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f778dccfe13b8597a0a9cbb61a204c03f8e166d7f7d5a21dfcf03d56bd2505c3","136095f5f529a891eabd8e04693c182f0701716fe051fa04825b5d2e0c85d1ae","6a3912016f3b41c8cb67a2bc3a6fb2597065d065a809f33288fe838693b7f9a0","0a23ad00d0c62dccae0a759ad4853cd514abd176cfa85ba2665e30f7bdc8bcc0","09189108547ebf046c47f01f4645667e6816a126355ee963d5ad7b91167e4290")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f778dccfe13b8597a0a9cbb61a204c03f8e166d7f7d5a21dfcf03d56bd2505c3","136095f5f529a891eabd8e04693c182f0701716fe051fa04825b5d2e0c85d1ae","6a3912016f3b41c8cb67a2bc3a6fb2597065d065a809f33288fe838693b7f9a0","0a23ad00d0c62dccae0a759ad4853cd514abd176cfa85ba2665e30f7bdc8bcc0","09189108547ebf046c47f01f4645667e6816a126355ee963d5ad7b91167e4290")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f778dccfe13b8597a0a9cbb61a204c03f8e166d7f7d5a21dfcf03d56bd2505c3","136095f5f529a891eabd8e04693c182f0701716fe051fa04825b5d2e0c85d1ae","6a3912016f3b41c8cb67a2bc3a6fb2597065d065a809f33288fe838693b7f9a0","0a23ad00d0c62dccae0a759ad4853cd514abd176cfa85ba2665e30f7bdc8bcc0","09189108547ebf046c47f01f4645667e6816a126355ee963d5ad7b91167e4290")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f778dccfe13b8597a0a9cbb61a204c03f8e166d7f7d5a21dfcf03d56bd2505c3","136095f5f529a891eabd8e04693c182f0701716fe051fa04825b5d2e0c85d1ae","6a3912016f3b41c8cb67a2bc3a6fb2597065d065a809f33288fe838693b7f9a0","0a23ad00d0c62dccae0a759ad4853cd514abd176cfa85ba2665e30f7bdc8bcc0","09189108547ebf046c47f01f4645667e6816a126355ee963d5ad7b91167e4290")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f778dccfe13b8597a0a9cbb61a204c03f8e166d7f7d5a21dfcf03d56bd2505c3","136095f5f529a891eabd8e04693c182f0701716fe051fa04825b5d2e0c85d1ae","6a3912016f3b41c8cb67a2bc3a6fb2597065d065a809f33288fe838693b7f9a0","0a23ad00d0c62dccae0a759ad4853cd514abd176cfa85ba2665e30f7bdc8bcc0","09189108547ebf046c47f01f4645667e6816a126355ee963d5ad7b91167e4290")
