index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("45.91.225.139","107.148.165.151","45.121.146.88")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("278c4fc89f8e921bc6c7d015e3445a1cc6319a66 ","42be0232970d5274c5278de77d172b7594ff6755","f9d958c537b097d45b4fca83048567a52bb597bf","fefec06620f2ef48f24b2106a246813c1b5258f4","548bbf4b79eb5a173741e43aa4ba17b92be8ed3a","417e4274771a9614d49493157761c12e54060588","03a57262a2f3563cf0faef5cde5656da437d58ce","388b7130700dcc45a052b8cd447d1eb76c9c2c54","176a0468dd70abe199483f1af287e5c5e2179b8c","01e1913b1471e7a1d332bfc8b1e54b88350cb8ad","8bad3d47b2fc53dc6f9e48debac9533937c32609","0a588f02e60de547969d000968a458dcdc341312","aa5458bdfefe2a97611bb0fd9cf155a06f88ef5d","4da26e656ef5554fac83d1e02105fad0d1bd7979","f8088c15f9ea2a1e167d5fa24b65ec356939ba91","0726e56885478357de3dce13efff40bfba53ddc2","7855a30e933e2b5c3db3661075c065af2e40b94e","696a4df81337e7ecd0ea01ae92d8af3d13855c12","abaaab07985add1771da0c086553fef3974cf742","7a38ae6df845def6f28a4826290f1726772b247e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("278c4fc89f8e921bc6c7d015e3445a1cc6319a66 ","42be0232970d5274c5278de77d172b7594ff6755","f9d958c537b097d45b4fca83048567a52bb597bf","fefec06620f2ef48f24b2106a246813c1b5258f4","548bbf4b79eb5a173741e43aa4ba17b92be8ed3a","417e4274771a9614d49493157761c12e54060588","03a57262a2f3563cf0faef5cde5656da437d58ce","388b7130700dcc45a052b8cd447d1eb76c9c2c54","176a0468dd70abe199483f1af287e5c5e2179b8c","01e1913b1471e7a1d332bfc8b1e54b88350cb8ad","8bad3d47b2fc53dc6f9e48debac9533937c32609","0a588f02e60de547969d000968a458dcdc341312","aa5458bdfefe2a97611bb0fd9cf155a06f88ef5d","4da26e656ef5554fac83d1e02105fad0d1bd7979","f8088c15f9ea2a1e167d5fa24b65ec356939ba91","0726e56885478357de3dce13efff40bfba53ddc2","7855a30e933e2b5c3db3661075c065af2e40b94e","696a4df81337e7ecd0ea01ae92d8af3d13855c12","abaaab07985add1771da0c086553fef3974cf742","7a38ae6df845def6f28a4826290f1726772b247e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("278c4fc89f8e921bc6c7d015e3445a1cc6319a66 ","42be0232970d5274c5278de77d172b7594ff6755","f9d958c537b097d45b4fca83048567a52bb597bf","fefec06620f2ef48f24b2106a246813c1b5258f4","548bbf4b79eb5a173741e43aa4ba17b92be8ed3a","417e4274771a9614d49493157761c12e54060588","03a57262a2f3563cf0faef5cde5656da437d58ce","388b7130700dcc45a052b8cd447d1eb76c9c2c54","176a0468dd70abe199483f1af287e5c5e2179b8c","01e1913b1471e7a1d332bfc8b1e54b88350cb8ad","8bad3d47b2fc53dc6f9e48debac9533937c32609","0a588f02e60de547969d000968a458dcdc341312","aa5458bdfefe2a97611bb0fd9cf155a06f88ef5d","4da26e656ef5554fac83d1e02105fad0d1bd7979","f8088c15f9ea2a1e167d5fa24b65ec356939ba91","0726e56885478357de3dce13efff40bfba53ddc2","7855a30e933e2b5c3db3661075c065af2e40b94e","696a4df81337e7ecd0ea01ae92d8af3d13855c12","abaaab07985add1771da0c086553fef3974cf742","7a38ae6df845def6f28a4826290f1726772b247e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("278c4fc89f8e921bc6c7d015e3445a1cc6319a66 ","42be0232970d5274c5278de77d172b7594ff6755","f9d958c537b097d45b4fca83048567a52bb597bf","fefec06620f2ef48f24b2106a246813c1b5258f4","548bbf4b79eb5a173741e43aa4ba17b92be8ed3a","417e4274771a9614d49493157761c12e54060588","03a57262a2f3563cf0faef5cde5656da437d58ce","388b7130700dcc45a052b8cd447d1eb76c9c2c54","176a0468dd70abe199483f1af287e5c5e2179b8c","01e1913b1471e7a1d332bfc8b1e54b88350cb8ad","8bad3d47b2fc53dc6f9e48debac9533937c32609","0a588f02e60de547969d000968a458dcdc341312","aa5458bdfefe2a97611bb0fd9cf155a06f88ef5d","4da26e656ef5554fac83d1e02105fad0d1bd7979","f8088c15f9ea2a1e167d5fa24b65ec356939ba91","0726e56885478357de3dce13efff40bfba53ddc2","7855a30e933e2b5c3db3661075c065af2e40b94e","696a4df81337e7ecd0ea01ae92d8af3d13855c12","abaaab07985add1771da0c086553fef3974cf742","7a38ae6df845def6f28a4826290f1726772b247e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("278c4fc89f8e921bc6c7d015e3445a1cc6319a66 ","42be0232970d5274c5278de77d172b7594ff6755","f9d958c537b097d45b4fca83048567a52bb597bf","fefec06620f2ef48f24b2106a246813c1b5258f4","548bbf4b79eb5a173741e43aa4ba17b92be8ed3a","417e4274771a9614d49493157761c12e54060588","03a57262a2f3563cf0faef5cde5656da437d58ce","388b7130700dcc45a052b8cd447d1eb76c9c2c54","176a0468dd70abe199483f1af287e5c5e2179b8c","01e1913b1471e7a1d332bfc8b1e54b88350cb8ad","8bad3d47b2fc53dc6f9e48debac9533937c32609","0a588f02e60de547969d000968a458dcdc341312","aa5458bdfefe2a97611bb0fd9cf155a06f88ef5d","4da26e656ef5554fac83d1e02105fad0d1bd7979","f8088c15f9ea2a1e167d5fa24b65ec356939ba91","0726e56885478357de3dce13efff40bfba53ddc2","7855a30e933e2b5c3db3661075c065af2e40b94e","696a4df81337e7ecd0ea01ae92d8af3d13855c12","abaaab07985add1771da0c086553fef3974cf742","7a38ae6df845def6f28a4826290f1726772b247e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("278c4fc89f8e921bc6c7d015e3445a1cc6319a66 ","42be0232970d5274c5278de77d172b7594ff6755","f9d958c537b097d45b4fca83048567a52bb597bf","fefec06620f2ef48f24b2106a246813c1b5258f4","548bbf4b79eb5a173741e43aa4ba17b92be8ed3a","417e4274771a9614d49493157761c12e54060588","03a57262a2f3563cf0faef5cde5656da437d58ce","388b7130700dcc45a052b8cd447d1eb76c9c2c54","176a0468dd70abe199483f1af287e5c5e2179b8c","01e1913b1471e7a1d332bfc8b1e54b88350cb8ad","8bad3d47b2fc53dc6f9e48debac9533937c32609","0a588f02e60de547969d000968a458dcdc341312","aa5458bdfefe2a97611bb0fd9cf155a06f88ef5d","4da26e656ef5554fac83d1e02105fad0d1bd7979","f8088c15f9ea2a1e167d5fa24b65ec356939ba91","0726e56885478357de3dce13efff40bfba53ddc2","7855a30e933e2b5c3db3661075c065af2e40b94e","696a4df81337e7ecd0ea01ae92d8af3d13855c12","abaaab07985add1771da0c086553fef3974cf742","7a38ae6df845def6f28a4826290f1726772b247e")
