index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("198.27.77.242")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("198.27.77.242")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("198.27.77.242")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("198.27.77.242")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("198.27.77.242")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("409ad1b62b478477ce945791e15e06b508e5bb156c4981263946cc232df89996","3380d42b418582b6f23cfd749f3f0851d9bffc66b51b338885f8aa7559479054")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("409ad1b62b478477ce945791e15e06b508e5bb156c4981263946cc232df89996","3380d42b418582b6f23cfd749f3f0851d9bffc66b51b338885f8aa7559479054")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("409ad1b62b478477ce945791e15e06b508e5bb156c4981263946cc232df89996","3380d42b418582b6f23cfd749f3f0851d9bffc66b51b338885f8aa7559479054")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("409ad1b62b478477ce945791e15e06b508e5bb156c4981263946cc232df89996","3380d42b418582b6f23cfd749f3f0851d9bffc66b51b338885f8aa7559479054")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("409ad1b62b478477ce945791e15e06b508e5bb156c4981263946cc232df89996","3380d42b418582b6f23cfd749f3f0851d9bffc66b51b338885f8aa7559479054")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("409ad1b62b478477ce945791e15e06b508e5bb156c4981263946cc232df89996","3380d42b418582b6f23cfd749f3f0851d9bffc66b51b338885f8aa7559479054")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5")
