index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.225.69.69")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("185.225.69.69")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.225.69.69")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.225.69.69")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("185.225.69.69")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("d8009ad96082a31d074e85dae3761b51a78f99e2cc8179ba305955c2a645b94d","0affab34d950321e3031864ec2b6c00e4edafb54f4b327717cb5b042c38a33c9","fa1959dd382ce868c975599c6c3cc536aa0073be44fc8a6571a20fb0c8bea836","ec5f07c169267dec875fdd135c1d97186b494a6f1214fb6b40036fd4ce725def","f2a8bdf135caca0d7359a7163a4343701a5bdfbc8007e71424649e45901ab7e2","f28491b367375f01fb9337ffc137225f4f232df4e074775dd2cc7e667394651c","94c58c7fb43153658eaa9409fc78d8741d3c388d3b8d4296361867fe45d5fa45","b9a2c986b6ad1eb4cfb0303baede906936fe96396f3cf490b0984a4798d741d8","bc7a3b3cfae59f1bfbde57154cb1e7deebdcdf6277ac446919df07e3b8a6e4df","4e8f24fb50a08c12636f3d50c94772f355d5229e58110cccb3b4835cb2371aec","88cd1bc85e6a57fa254ede18f96566b33cee999c538902aefc5b819d71163d07","cb80a074e5fde8d297c2c74a0377e612b4030cc756baf4fff3cc2452ebc04a9c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d8009ad96082a31d074e85dae3761b51a78f99e2cc8179ba305955c2a645b94d","0affab34d950321e3031864ec2b6c00e4edafb54f4b327717cb5b042c38a33c9","fa1959dd382ce868c975599c6c3cc536aa0073be44fc8a6571a20fb0c8bea836","ec5f07c169267dec875fdd135c1d97186b494a6f1214fb6b40036fd4ce725def","f2a8bdf135caca0d7359a7163a4343701a5bdfbc8007e71424649e45901ab7e2","f28491b367375f01fb9337ffc137225f4f232df4e074775dd2cc7e667394651c","94c58c7fb43153658eaa9409fc78d8741d3c388d3b8d4296361867fe45d5fa45","b9a2c986b6ad1eb4cfb0303baede906936fe96396f3cf490b0984a4798d741d8","bc7a3b3cfae59f1bfbde57154cb1e7deebdcdf6277ac446919df07e3b8a6e4df","4e8f24fb50a08c12636f3d50c94772f355d5229e58110cccb3b4835cb2371aec","88cd1bc85e6a57fa254ede18f96566b33cee999c538902aefc5b819d71163d07","cb80a074e5fde8d297c2c74a0377e612b4030cc756baf4fff3cc2452ebc04a9c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d8009ad96082a31d074e85dae3761b51a78f99e2cc8179ba305955c2a645b94d","0affab34d950321e3031864ec2b6c00e4edafb54f4b327717cb5b042c38a33c9","fa1959dd382ce868c975599c6c3cc536aa0073be44fc8a6571a20fb0c8bea836","ec5f07c169267dec875fdd135c1d97186b494a6f1214fb6b40036fd4ce725def","f2a8bdf135caca0d7359a7163a4343701a5bdfbc8007e71424649e45901ab7e2","f28491b367375f01fb9337ffc137225f4f232df4e074775dd2cc7e667394651c","94c58c7fb43153658eaa9409fc78d8741d3c388d3b8d4296361867fe45d5fa45","b9a2c986b6ad1eb4cfb0303baede906936fe96396f3cf490b0984a4798d741d8","bc7a3b3cfae59f1bfbde57154cb1e7deebdcdf6277ac446919df07e3b8a6e4df","4e8f24fb50a08c12636f3d50c94772f355d5229e58110cccb3b4835cb2371aec","88cd1bc85e6a57fa254ede18f96566b33cee999c538902aefc5b819d71163d07","cb80a074e5fde8d297c2c74a0377e612b4030cc756baf4fff3cc2452ebc04a9c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("d8009ad96082a31d074e85dae3761b51a78f99e2cc8179ba305955c2a645b94d","0affab34d950321e3031864ec2b6c00e4edafb54f4b327717cb5b042c38a33c9","fa1959dd382ce868c975599c6c3cc536aa0073be44fc8a6571a20fb0c8bea836","ec5f07c169267dec875fdd135c1d97186b494a6f1214fb6b40036fd4ce725def","f2a8bdf135caca0d7359a7163a4343701a5bdfbc8007e71424649e45901ab7e2","f28491b367375f01fb9337ffc137225f4f232df4e074775dd2cc7e667394651c","94c58c7fb43153658eaa9409fc78d8741d3c388d3b8d4296361867fe45d5fa45","b9a2c986b6ad1eb4cfb0303baede906936fe96396f3cf490b0984a4798d741d8","bc7a3b3cfae59f1bfbde57154cb1e7deebdcdf6277ac446919df07e3b8a6e4df","4e8f24fb50a08c12636f3d50c94772f355d5229e58110cccb3b4835cb2371aec","88cd1bc85e6a57fa254ede18f96566b33cee999c538902aefc5b819d71163d07","cb80a074e5fde8d297c2c74a0377e612b4030cc756baf4fff3cc2452ebc04a9c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d8009ad96082a31d074e85dae3761b51a78f99e2cc8179ba305955c2a645b94d","0affab34d950321e3031864ec2b6c00e4edafb54f4b327717cb5b042c38a33c9","fa1959dd382ce868c975599c6c3cc536aa0073be44fc8a6571a20fb0c8bea836","ec5f07c169267dec875fdd135c1d97186b494a6f1214fb6b40036fd4ce725def","f2a8bdf135caca0d7359a7163a4343701a5bdfbc8007e71424649e45901ab7e2","f28491b367375f01fb9337ffc137225f4f232df4e074775dd2cc7e667394651c","94c58c7fb43153658eaa9409fc78d8741d3c388d3b8d4296361867fe45d5fa45","b9a2c986b6ad1eb4cfb0303baede906936fe96396f3cf490b0984a4798d741d8","bc7a3b3cfae59f1bfbde57154cb1e7deebdcdf6277ac446919df07e3b8a6e4df","4e8f24fb50a08c12636f3d50c94772f355d5229e58110cccb3b4835cb2371aec","88cd1bc85e6a57fa254ede18f96566b33cee999c538902aefc5b819d71163d07","cb80a074e5fde8d297c2c74a0377e612b4030cc756baf4fff3cc2452ebc04a9c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d8009ad96082a31d074e85dae3761b51a78f99e2cc8179ba305955c2a645b94d","0affab34d950321e3031864ec2b6c00e4edafb54f4b327717cb5b042c38a33c9","fa1959dd382ce868c975599c6c3cc536aa0073be44fc8a6571a20fb0c8bea836","ec5f07c169267dec875fdd135c1d97186b494a6f1214fb6b40036fd4ce725def","f2a8bdf135caca0d7359a7163a4343701a5bdfbc8007e71424649e45901ab7e2","f28491b367375f01fb9337ffc137225f4f232df4e074775dd2cc7e667394651c","94c58c7fb43153658eaa9409fc78d8741d3c388d3b8d4296361867fe45d5fa45","b9a2c986b6ad1eb4cfb0303baede906936fe96396f3cf490b0984a4798d741d8","bc7a3b3cfae59f1bfbde57154cb1e7deebdcdf6277ac446919df07e3b8a6e4df","4e8f24fb50a08c12636f3d50c94772f355d5229e58110cccb3b4835cb2371aec","88cd1bc85e6a57fa254ede18f96566b33cee999c538902aefc5b819d71163d07","cb80a074e5fde8d297c2c74a0377e612b4030cc756baf4fff3cc2452ebc04a9c")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sense4baby.fr" OR destinationhostname CONTAINS "eyetechltd.com" OR destinationhostname CONTAINS "nikeoutletinc.org" OR destinationhostname CONTAINS "megatoolkit.com" OR destinationhostname CONTAINS "reyweb.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sense4baby.fr" OR destinationhostname CONTAINS "eyetechltd.com" OR destinationhostname CONTAINS "nikeoutletinc.org" OR destinationhostname CONTAINS "megatoolkit.com" OR destinationhostname CONTAINS "reyweb.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sense4baby.fr" OR destinationhostname CONTAINS "eyetechltd.com" OR destinationhostname CONTAINS "nikeoutletinc.org" OR destinationhostname CONTAINS "megatoolkit.com" OR destinationhostname CONTAINS "reyweb.com")
