index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("185.188.183.144","94.177.123.134","88.214.27.40","51.83.216.211")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8d44ccac6b5512a416339984ad664d79","14471a353788bb6cdb6071d0e0a83004","327090cbddf94fc901662f0e863ba0cb","39d550fd902ca4c1461961d01ad1aeb6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8d44ccac6b5512a416339984ad664d79","14471a353788bb6cdb6071d0e0a83004","327090cbddf94fc901662f0e863ba0cb","39d550fd902ca4c1461961d01ad1aeb6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8d44ccac6b5512a416339984ad664d79","14471a353788bb6cdb6071d0e0a83004","327090cbddf94fc901662f0e863ba0cb","39d550fd902ca4c1461961d01ad1aeb6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8d44ccac6b5512a416339984ad664d79","14471a353788bb6cdb6071d0e0a83004","327090cbddf94fc901662f0e863ba0cb","39d550fd902ca4c1461961d01ad1aeb6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8d44ccac6b5512a416339984ad664d79","14471a353788bb6cdb6071d0e0a83004","327090cbddf94fc901662f0e863ba0cb","39d550fd902ca4c1461961d01ad1aeb6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8d44ccac6b5512a416339984ad664d79","14471a353788bb6cdb6071d0e0a83004","327090cbddf94fc901662f0e863ba0cb","39d550fd902ca4c1461961d01ad1aeb6")
