index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("150.109.111.208")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("150.109.111.208")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("150.109.111.208")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("150.109.111.208")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("150.109.111.208")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("af6507e03e032294822e4157134c9909","ea26bed30da01f5d81c3d96af59424acf2fbb14b","8e1e0ddeb249b9f8331b1562498d2cbd9138ec5e00c55a521d489e65b7ef447d","d4bdfb90d9aa6d573f3ff3a755e2e630","2e5a752f8d1c3b0ba819381c4539006d40692ee9","dac4c2e5318bf0feca535b2116bd48e72d8f36ff7ec8f3bd176fd7e57bd37fc1","3c5654ddd7998ae39717f7e3d079bd93","8429a32acfed3f010502a5b88199cc0367f92fd7","54fecd3227a435c17463f543eacdb7482fc7b2fde4db1d12d16aab94dfdf4085","3db7101794cb166ca672814728f4e8d7","f8b5d7370b56e127449760701b97bf8f43d16852","f167279c692a14fee15bb1f8eb8a9b6edd43cf74d2b590b27129fd69e6b3de88")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("af6507e03e032294822e4157134c9909","ea26bed30da01f5d81c3d96af59424acf2fbb14b","8e1e0ddeb249b9f8331b1562498d2cbd9138ec5e00c55a521d489e65b7ef447d","d4bdfb90d9aa6d573f3ff3a755e2e630","2e5a752f8d1c3b0ba819381c4539006d40692ee9","dac4c2e5318bf0feca535b2116bd48e72d8f36ff7ec8f3bd176fd7e57bd37fc1","3c5654ddd7998ae39717f7e3d079bd93","8429a32acfed3f010502a5b88199cc0367f92fd7","54fecd3227a435c17463f543eacdb7482fc7b2fde4db1d12d16aab94dfdf4085","3db7101794cb166ca672814728f4e8d7","f8b5d7370b56e127449760701b97bf8f43d16852","f167279c692a14fee15bb1f8eb8a9b6edd43cf74d2b590b27129fd69e6b3de88")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("af6507e03e032294822e4157134c9909","ea26bed30da01f5d81c3d96af59424acf2fbb14b","8e1e0ddeb249b9f8331b1562498d2cbd9138ec5e00c55a521d489e65b7ef447d","d4bdfb90d9aa6d573f3ff3a755e2e630","2e5a752f8d1c3b0ba819381c4539006d40692ee9","dac4c2e5318bf0feca535b2116bd48e72d8f36ff7ec8f3bd176fd7e57bd37fc1","3c5654ddd7998ae39717f7e3d079bd93","8429a32acfed3f010502a5b88199cc0367f92fd7","54fecd3227a435c17463f543eacdb7482fc7b2fde4db1d12d16aab94dfdf4085","3db7101794cb166ca672814728f4e8d7","f8b5d7370b56e127449760701b97bf8f43d16852","f167279c692a14fee15bb1f8eb8a9b6edd43cf74d2b590b27129fd69e6b3de88")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("af6507e03e032294822e4157134c9909","ea26bed30da01f5d81c3d96af59424acf2fbb14b","8e1e0ddeb249b9f8331b1562498d2cbd9138ec5e00c55a521d489e65b7ef447d","d4bdfb90d9aa6d573f3ff3a755e2e630","2e5a752f8d1c3b0ba819381c4539006d40692ee9","dac4c2e5318bf0feca535b2116bd48e72d8f36ff7ec8f3bd176fd7e57bd37fc1","3c5654ddd7998ae39717f7e3d079bd93","8429a32acfed3f010502a5b88199cc0367f92fd7","54fecd3227a435c17463f543eacdb7482fc7b2fde4db1d12d16aab94dfdf4085","3db7101794cb166ca672814728f4e8d7","f8b5d7370b56e127449760701b97bf8f43d16852","f167279c692a14fee15bb1f8eb8a9b6edd43cf74d2b590b27129fd69e6b3de88")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("af6507e03e032294822e4157134c9909","ea26bed30da01f5d81c3d96af59424acf2fbb14b","8e1e0ddeb249b9f8331b1562498d2cbd9138ec5e00c55a521d489e65b7ef447d","d4bdfb90d9aa6d573f3ff3a755e2e630","2e5a752f8d1c3b0ba819381c4539006d40692ee9","dac4c2e5318bf0feca535b2116bd48e72d8f36ff7ec8f3bd176fd7e57bd37fc1","3c5654ddd7998ae39717f7e3d079bd93","8429a32acfed3f010502a5b88199cc0367f92fd7","54fecd3227a435c17463f543eacdb7482fc7b2fde4db1d12d16aab94dfdf4085","3db7101794cb166ca672814728f4e8d7","f8b5d7370b56e127449760701b97bf8f43d16852","f167279c692a14fee15bb1f8eb8a9b6edd43cf74d2b590b27129fd69e6b3de88")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("af6507e03e032294822e4157134c9909","ea26bed30da01f5d81c3d96af59424acf2fbb14b","8e1e0ddeb249b9f8331b1562498d2cbd9138ec5e00c55a521d489e65b7ef447d","d4bdfb90d9aa6d573f3ff3a755e2e630","2e5a752f8d1c3b0ba819381c4539006d40692ee9","dac4c2e5318bf0feca535b2116bd48e72d8f36ff7ec8f3bd176fd7e57bd37fc1","3c5654ddd7998ae39717f7e3d079bd93","8429a32acfed3f010502a5b88199cc0367f92fd7","54fecd3227a435c17463f543eacdb7482fc7b2fde4db1d12d16aab94dfdf4085","3db7101794cb166ca672814728f4e8d7","f8b5d7370b56e127449760701b97bf8f43d16852","f167279c692a14fee15bb1f8eb8a9b6edd43cf74d2b590b27129fd69e6b3de88")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "s3crt.biz")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "s3crt.biz")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "s3crt.biz")
