index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.175.47.32")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("185.175.47.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.175.47.32")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.175.47.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("185.175.47.32")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3477A173E2C1005A81D042802AB0F22CC12A4D55","763499B37AACD317E7D2F512872F9ED719AACAE1","9A0FC9B53117ECDF78A899649C59F50C","8087F3C1F7F65E2CFC202550D3645000","A6C8787815BC72DF7B0CFA6831157143","95425ACE5598941165025136AD52893D","9E63911B5B7E63023708125418D6D4D5","1A426D873C1C6EA9D25747932F392E14","B521ECCF21D13DCB062DDF39EF4BF351","132071DC69B875D239F133984655A26A")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3477A173E2C1005A81D042802AB0F22CC12A4D55","763499B37AACD317E7D2F512872F9ED719AACAE1","9A0FC9B53117ECDF78A899649C59F50C","8087F3C1F7F65E2CFC202550D3645000","A6C8787815BC72DF7B0CFA6831157143","95425ACE5598941165025136AD52893D","9E63911B5B7E63023708125418D6D4D5","1A426D873C1C6EA9D25747932F392E14","B521ECCF21D13DCB062DDF39EF4BF351","132071DC69B875D239F133984655A26A")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3477A173E2C1005A81D042802AB0F22CC12A4D55","763499B37AACD317E7D2F512872F9ED719AACAE1","9A0FC9B53117ECDF78A899649C59F50C","8087F3C1F7F65E2CFC202550D3645000","A6C8787815BC72DF7B0CFA6831157143","95425ACE5598941165025136AD52893D","9E63911B5B7E63023708125418D6D4D5","1A426D873C1C6EA9D25747932F392E14","B521ECCF21D13DCB062DDF39EF4BF351","132071DC69B875D239F133984655A26A")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3477A173E2C1005A81D042802AB0F22CC12A4D55","763499B37AACD317E7D2F512872F9ED719AACAE1","9A0FC9B53117ECDF78A899649C59F50C","8087F3C1F7F65E2CFC202550D3645000","A6C8787815BC72DF7B0CFA6831157143","95425ACE5598941165025136AD52893D","9E63911B5B7E63023708125418D6D4D5","1A426D873C1C6EA9D25747932F392E14","B521ECCF21D13DCB062DDF39EF4BF351","132071DC69B875D239F133984655A26A")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3477A173E2C1005A81D042802AB0F22CC12A4D55","763499B37AACD317E7D2F512872F9ED719AACAE1","9A0FC9B53117ECDF78A899649C59F50C","8087F3C1F7F65E2CFC202550D3645000","A6C8787815BC72DF7B0CFA6831157143","95425ACE5598941165025136AD52893D","9E63911B5B7E63023708125418D6D4D5","1A426D873C1C6EA9D25747932F392E14","B521ECCF21D13DCB062DDF39EF4BF351","132071DC69B875D239F133984655A26A")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3477A173E2C1005A81D042802AB0F22CC12A4D55","763499B37AACD317E7D2F512872F9ED719AACAE1","9A0FC9B53117ECDF78A899649C59F50C","8087F3C1F7F65E2CFC202550D3645000","A6C8787815BC72DF7B0CFA6831157143","95425ACE5598941165025136AD52893D","9E63911B5B7E63023708125418D6D4D5","1A426D873C1C6EA9D25747932F392E14","B521ECCF21D13DCB062DDF39EF4BF351","132071DC69B875D239F133984655A26A")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pcloud.com" OR destinationhostname CONTAINS "Moderator.hldns.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pcloud.com" OR destinationhostname CONTAINS "Moderator.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pcloud.com" OR destinationhostname CONTAINS "Moderator.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND emailsender NOT NULL AND (emailsender CONTAINS "pau7887pau@yandex.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND emailsender NOT NULL AND (emailsender CONTAINS "pau7887pau@yandex.ru")
