index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "1.indexsinas.me" OR destinationhostname CONTAINS "2.indexsinas.me" OR destinationhostname CONTAINS "a.ccmd.website" OR destinationhostname CONTAINS "ipip.website" OR destinationhostname CONTAINS "dllhost.website")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "1.indexsinas.me" OR destinationhostname CONTAINS "2.indexsinas.me" OR destinationhostname CONTAINS "a.ccmd.website" OR destinationhostname CONTAINS "ipip.website" OR destinationhostname CONTAINS "dllhost.website")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "1.indexsinas.me" OR destinationhostname CONTAINS "2.indexsinas.me" OR destinationhostname CONTAINS "a.ccmd.website" OR destinationhostname CONTAINS "ipip.website" OR destinationhostname CONTAINS "dllhost.website")
index=activity AND rg_functionality="Microsoft Windows" AND destinationprocessname NOT NULL AND (destinationprocessname CONTAINS "MicrosotMaims" OR destinationprocessname CONTAINS "MicrosotMaim" OR destinationprocessname CONTAINS "MicrosoftMysql" OR destinationprocessname CONTAINS "MicrosoftMssql" OR destinationprocessname CONTAINS "Serivces" OR destinationprocessname CONTAINS "")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationprocessname NOT NULL AND (destinationprocessname CONTAINS "MicrosotMaims" OR destinationprocessname CONTAINS "MicrosotMaim" OR destinationprocessname CONTAINS "MicrosoftMysql" OR destinationprocessname CONTAINS "MicrosoftMssql" OR destinationprocessname CONTAINS "Serivces" OR destinationprocessname CONTAINS "")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationprocessname NOT NULL AND (destinationprocessname CONTAINS "MicrosotMaims" OR destinationprocessname CONTAINS "MicrosotMaim" OR destinationprocessname CONTAINS "MicrosoftMysql" OR destinationprocessname CONTAINS "MicrosoftMssql" OR destinationprocessname CONTAINS "Serivces" OR destinationprocessname CONTAINS "")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationprocessname NOT NULL AND (destinationprocessname CONTAINS "MicrosotMaims" OR destinationprocessname CONTAINS "MicrosotMaim" OR destinationprocessname CONTAINS "MicrosoftMysql" OR destinationprocessname CONTAINS "MicrosoftMssql" OR destinationprocessname CONTAINS "Serivces" OR destinationprocessname CONTAINS "")
index=activity AND rg_functionality="Microsoft Windows" AND sourceprocessname NOT NULL AND (sourceprocessname CONTAINS "MicrosotMaims" OR sourceprocessname CONTAINS "MicrosotMaim" OR sourceprocessname CONTAINS "MicrosoftMysql" OR sourceprocessname CONTAINS "MicrosoftMssql" OR sourceprocessname CONTAINS "Serivces" OR sourceprocessname CONTAINS "")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceprocessname NOT NULL AND (sourceprocessname CONTAINS "MicrosotMaims" OR sourceprocessname CONTAINS "MicrosotMaim" OR sourceprocessname CONTAINS "MicrosoftMysql" OR sourceprocessname CONTAINS "MicrosoftMssql" OR sourceprocessname CONTAINS "Serivces" OR sourceprocessname CONTAINS "")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceprocessname NOT NULL AND (sourceprocessname CONTAINS "MicrosotMaims" OR sourceprocessname CONTAINS "MicrosotMaim" OR sourceprocessname CONTAINS "MicrosoftMysql" OR sourceprocessname CONTAINS "MicrosoftMssql" OR sourceprocessname CONTAINS "Serivces" OR sourceprocessname CONTAINS "")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceprocessname NOT NULL AND (sourceprocessname CONTAINS "MicrosotMaims" OR sourceprocessname CONTAINS "MicrosotMaim" OR sourceprocessname CONTAINS "MicrosoftMysql" OR sourceprocessname CONTAINS "MicrosoftMssql" OR sourceprocessname CONTAINS "Serivces" OR sourceprocessname CONTAINS "")
index=activity AND rg_functionality="Microsoft Windows" AND filename NOT NULL AND (filename CONTAINS "MicrosotMaims" OR filename CONTAINS "MicrosotMaim" OR filename CONTAINS "MicrosoftMysql" OR filename CONTAINS "MicrosoftMssql" OR filename CONTAINS "Serivces" OR filename CONTAINS "")
index=activity AND rg_functionality="Endpoint Management Systems" AND filename NOT NULL AND (filename CONTAINS "MicrosotMaims" OR filename CONTAINS "MicrosotMaim" OR filename CONTAINS "MicrosoftMysql" OR filename CONTAINS "MicrosoftMssql" OR filename CONTAINS "Serivces" OR filename CONTAINS "")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filename NOT NULL AND (filename CONTAINS "MicrosotMaims" OR filename CONTAINS "MicrosotMaim" OR filename CONTAINS "MicrosoftMysql" OR filename CONTAINS "MicrosoftMssql" OR filename CONTAINS "Serivces" OR filename CONTAINS "")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filename NOT NULL AND (filename CONTAINS "MicrosotMaims" OR filename CONTAINS "MicrosotMaim" OR filename CONTAINS "MicrosoftMysql" OR filename CONTAINS "MicrosoftMssql" OR filename CONTAINS "Serivces" OR filename CONTAINS "")
