index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("160.178.220.194","194.5.98.55","107.172.30.213")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("91b6ea9fccb4eae21335588bc83dea09780a5b7e145721f7098baafa2072286a","52b6db0fec7f587505aabfe091d8e0751acd8d4f4d120eeba5519c25a6dd8673","977a9d25972b999ae3b12d12e12978f4d116b5fb713c76c57998be15b4172def","68b221360edf4802b470fbc86493025707cf4913cc15729f4bc6ec149a4dc7ba","59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7","fbb8a86f399491ea5633df62f66bec1e4d4d5531f1dff976da1a3091b8ea4f34","4fa5525008128f77562fbb64af82b2fbcbc6c0afe71d567470380dc4476184a9","c3afaf555eabe5e40dcb87d2c292491e561b2dadcb1998f508088ba3bcac6836","677db7d296e4bea770f99f34e70be72b8a2b910b661804592202f3a4834ef102","4f319b2518d855803e678713cf4b6cae975ebdd60cc1174f1609bbb9ea76f007","01f44cdc139eca65f02bfe1a8918a0d073e89bc19350262dc9d10a564863fdfd","7a55844f86b49e103564750a37604954590d27686f7f7bc8e5ae6101e8e18424","ce2276bbb6423015a4f2e80f320e068b8f53f7c19a43fb0a6f9aa5784e716d6e","bf6f5a2730ced754907e277b590959d9c734681a07a466112c392e92d008fea3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("91b6ea9fccb4eae21335588bc83dea09780a5b7e145721f7098baafa2072286a","52b6db0fec7f587505aabfe091d8e0751acd8d4f4d120eeba5519c25a6dd8673","977a9d25972b999ae3b12d12e12978f4d116b5fb713c76c57998be15b4172def","68b221360edf4802b470fbc86493025707cf4913cc15729f4bc6ec149a4dc7ba","59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7","fbb8a86f399491ea5633df62f66bec1e4d4d5531f1dff976da1a3091b8ea4f34","4fa5525008128f77562fbb64af82b2fbcbc6c0afe71d567470380dc4476184a9","c3afaf555eabe5e40dcb87d2c292491e561b2dadcb1998f508088ba3bcac6836","677db7d296e4bea770f99f34e70be72b8a2b910b661804592202f3a4834ef102","4f319b2518d855803e678713cf4b6cae975ebdd60cc1174f1609bbb9ea76f007","01f44cdc139eca65f02bfe1a8918a0d073e89bc19350262dc9d10a564863fdfd","7a55844f86b49e103564750a37604954590d27686f7f7bc8e5ae6101e8e18424","ce2276bbb6423015a4f2e80f320e068b8f53f7c19a43fb0a6f9aa5784e716d6e","bf6f5a2730ced754907e277b590959d9c734681a07a466112c392e92d008fea3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("91b6ea9fccb4eae21335588bc83dea09780a5b7e145721f7098baafa2072286a","52b6db0fec7f587505aabfe091d8e0751acd8d4f4d120eeba5519c25a6dd8673","977a9d25972b999ae3b12d12e12978f4d116b5fb713c76c57998be15b4172def","68b221360edf4802b470fbc86493025707cf4913cc15729f4bc6ec149a4dc7ba","59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7","fbb8a86f399491ea5633df62f66bec1e4d4d5531f1dff976da1a3091b8ea4f34","4fa5525008128f77562fbb64af82b2fbcbc6c0afe71d567470380dc4476184a9","c3afaf555eabe5e40dcb87d2c292491e561b2dadcb1998f508088ba3bcac6836","677db7d296e4bea770f99f34e70be72b8a2b910b661804592202f3a4834ef102","4f319b2518d855803e678713cf4b6cae975ebdd60cc1174f1609bbb9ea76f007","01f44cdc139eca65f02bfe1a8918a0d073e89bc19350262dc9d10a564863fdfd","7a55844f86b49e103564750a37604954590d27686f7f7bc8e5ae6101e8e18424","ce2276bbb6423015a4f2e80f320e068b8f53f7c19a43fb0a6f9aa5784e716d6e","bf6f5a2730ced754907e277b590959d9c734681a07a466112c392e92d008fea3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("91b6ea9fccb4eae21335588bc83dea09780a5b7e145721f7098baafa2072286a","52b6db0fec7f587505aabfe091d8e0751acd8d4f4d120eeba5519c25a6dd8673","977a9d25972b999ae3b12d12e12978f4d116b5fb713c76c57998be15b4172def","68b221360edf4802b470fbc86493025707cf4913cc15729f4bc6ec149a4dc7ba","59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7","fbb8a86f399491ea5633df62f66bec1e4d4d5531f1dff976da1a3091b8ea4f34","4fa5525008128f77562fbb64af82b2fbcbc6c0afe71d567470380dc4476184a9","c3afaf555eabe5e40dcb87d2c292491e561b2dadcb1998f508088ba3bcac6836","677db7d296e4bea770f99f34e70be72b8a2b910b661804592202f3a4834ef102","4f319b2518d855803e678713cf4b6cae975ebdd60cc1174f1609bbb9ea76f007","01f44cdc139eca65f02bfe1a8918a0d073e89bc19350262dc9d10a564863fdfd","7a55844f86b49e103564750a37604954590d27686f7f7bc8e5ae6101e8e18424","ce2276bbb6423015a4f2e80f320e068b8f53f7c19a43fb0a6f9aa5784e716d6e","bf6f5a2730ced754907e277b590959d9c734681a07a466112c392e92d008fea3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("91b6ea9fccb4eae21335588bc83dea09780a5b7e145721f7098baafa2072286a","52b6db0fec7f587505aabfe091d8e0751acd8d4f4d120eeba5519c25a6dd8673","977a9d25972b999ae3b12d12e12978f4d116b5fb713c76c57998be15b4172def","68b221360edf4802b470fbc86493025707cf4913cc15729f4bc6ec149a4dc7ba","59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7","fbb8a86f399491ea5633df62f66bec1e4d4d5531f1dff976da1a3091b8ea4f34","4fa5525008128f77562fbb64af82b2fbcbc6c0afe71d567470380dc4476184a9","c3afaf555eabe5e40dcb87d2c292491e561b2dadcb1998f508088ba3bcac6836","677db7d296e4bea770f99f34e70be72b8a2b910b661804592202f3a4834ef102","4f319b2518d855803e678713cf4b6cae975ebdd60cc1174f1609bbb9ea76f007","01f44cdc139eca65f02bfe1a8918a0d073e89bc19350262dc9d10a564863fdfd","7a55844f86b49e103564750a37604954590d27686f7f7bc8e5ae6101e8e18424","ce2276bbb6423015a4f2e80f320e068b8f53f7c19a43fb0a6f9aa5784e716d6e","bf6f5a2730ced754907e277b590959d9c734681a07a466112c392e92d008fea3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("91b6ea9fccb4eae21335588bc83dea09780a5b7e145721f7098baafa2072286a","52b6db0fec7f587505aabfe091d8e0751acd8d4f4d120eeba5519c25a6dd8673","977a9d25972b999ae3b12d12e12978f4d116b5fb713c76c57998be15b4172def","68b221360edf4802b470fbc86493025707cf4913cc15729f4bc6ec149a4dc7ba","59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7","fbb8a86f399491ea5633df62f66bec1e4d4d5531f1dff976da1a3091b8ea4f34","4fa5525008128f77562fbb64af82b2fbcbc6c0afe71d567470380dc4476184a9","c3afaf555eabe5e40dcb87d2c292491e561b2dadcb1998f508088ba3bcac6836","677db7d296e4bea770f99f34e70be72b8a2b910b661804592202f3a4834ef102","4f319b2518d855803e678713cf4b6cae975ebdd60cc1174f1609bbb9ea76f007","01f44cdc139eca65f02bfe1a8918a0d073e89bc19350262dc9d10a564863fdfd","7a55844f86b49e103564750a37604954590d27686f7f7bc8e5ae6101e8e18424","ce2276bbb6423015a4f2e80f320e068b8f53f7c19a43fb0a6f9aa5784e716d6e","bf6f5a2730ced754907e277b590959d9c734681a07a466112c392e92d008fea3")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "info.v-pn.co" OR destinationhostname CONTAINS "lap-top.xyz" OR destinationhostname CONTAINS "av24.co" OR destinationhostname CONTAINS "bdpolice.co" OR destinationhostname CONTAINS "isiamibankbd.com" OR destinationhostname CONTAINS "bangladesh-bank.com" OR destinationhostname CONTAINS "zep0de.com" OR destinationhostname CONTAINS "Bracbank.info")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "info.v-pn.co" OR destinationhostname CONTAINS "lap-top.xyz" OR destinationhostname CONTAINS "av24.co" OR destinationhostname CONTAINS "bdpolice.co" OR destinationhostname CONTAINS "isiamibankbd.com" OR destinationhostname CONTAINS "bangladesh-bank.com" OR destinationhostname CONTAINS "zep0de.com" OR destinationhostname CONTAINS "Bracbank.info")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "info.v-pn.co" OR destinationhostname CONTAINS "lap-top.xyz" OR destinationhostname CONTAINS "av24.co" OR destinationhostname CONTAINS "bdpolice.co" OR destinationhostname CONTAINS "isiamibankbd.com" OR destinationhostname CONTAINS "bangladesh-bank.com" OR destinationhostname CONTAINS "zep0de.com" OR destinationhostname CONTAINS "Bracbank.info")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://lap-top.xyz/mobile/Lap-top%20Security_Setup.apk","https://av24.co/Virus_Cleaner_Setup.msi","http://bdpolice.co/answer-paper-demo.zip","https://isiamibankbd.com/tv/TPTUMC.exe","https://bangladesh-bank.com/PBVANA.doc","http://bangladesh-bank.com/invoice.zip","http://zep0de.com/viewticket.exe","http://bracbank.info/munafa.php","http://107.172.30.213/Flash.exe")
