index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("45.135.232.131","46.102.152.102")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("99e5a83a5f8e9fb7850922aed9a44bbc2b2a03f5fdda215db4d375bd1952536d","3b79aab07b9461a9d4f3c579555ee024888abcda4f5cc23eac5236a56bf740c7","77fa1b6fc7f192b0c983d1f8ecc73effae4f688a49439a7df27e76cfba870d23","032b09bbf1c63afc06afb011d69bafc096d7d925d99e24e3785db5a2957358ec","a871b7708b7dc1eb6fd959946a882a5af7dafc5ac135ac840cfbb60816024933","187e204c5c30b9b56ccc82df510c4c215cdfd37b475d1edba9a0631a4d82ae2e","1252f2bf3817714a8303f7e448930d6d4f797a70ec7effc80f2b1db5e49b9077","7240e51c027e498e71da4006e261409fcf3a5cf5b912d493a9da91199c840059","3039dddbcfb26326ba2e8692316ca674753fa6e1d141c887dc1e9f1ae546ca17","056f373077ca5b6a070975b22839d6f427cbcaeaec4dc31df86231cd3757f7e3","10fc8f8cf1b45a6a6b2b929414a84fc513f80d31b988c3d70f9a21968e943bf2","1bd39e3ee0d59ac691cc644c026b6c5bb3d0713f6e4e2136b94f161558a4444f","e7d165f3728b96921b43984733a92a51148ec87aec900c519a547c470e2a12d9","eebaec0f28addac39549ebf9be659e105046b1c9801381d4c4dd07cfc74d25d6","870f691ec9a83e9c4acce142e0acbf110260e6c8e707410c23c02076244f3973","573631c92d34e7ca2dfc1a590606bd66194d517f8d97dd319169262ac46b3e2e","b29e6b570a96224c874b9fae36b65db9e9b8c6e1081f18cf87e56bd996470c22","0a11002a0f390fb6e4933fead0521032f8a9ede7ced27f75011d8a30c5772376","721bb4554f8e6615dd9e10e28765cf42882c00e1d04f808d8f766b51fdf4d7e6","83b50b18ebfa4402b2c0d2d166565ee90202f080d903fd15cccd1312446a636e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("99e5a83a5f8e9fb7850922aed9a44bbc2b2a03f5fdda215db4d375bd1952536d","3b79aab07b9461a9d4f3c579555ee024888abcda4f5cc23eac5236a56bf740c7","77fa1b6fc7f192b0c983d1f8ecc73effae4f688a49439a7df27e76cfba870d23","032b09bbf1c63afc06afb011d69bafc096d7d925d99e24e3785db5a2957358ec","a871b7708b7dc1eb6fd959946a882a5af7dafc5ac135ac840cfbb60816024933","187e204c5c30b9b56ccc82df510c4c215cdfd37b475d1edba9a0631a4d82ae2e","1252f2bf3817714a8303f7e448930d6d4f797a70ec7effc80f2b1db5e49b9077","7240e51c027e498e71da4006e261409fcf3a5cf5b912d493a9da91199c840059","3039dddbcfb26326ba2e8692316ca674753fa6e1d141c887dc1e9f1ae546ca17","056f373077ca5b6a070975b22839d6f427cbcaeaec4dc31df86231cd3757f7e3","10fc8f8cf1b45a6a6b2b929414a84fc513f80d31b988c3d70f9a21968e943bf2","1bd39e3ee0d59ac691cc644c026b6c5bb3d0713f6e4e2136b94f161558a4444f","e7d165f3728b96921b43984733a92a51148ec87aec900c519a547c470e2a12d9","eebaec0f28addac39549ebf9be659e105046b1c9801381d4c4dd07cfc74d25d6","870f691ec9a83e9c4acce142e0acbf110260e6c8e707410c23c02076244f3973","573631c92d34e7ca2dfc1a590606bd66194d517f8d97dd319169262ac46b3e2e","b29e6b570a96224c874b9fae36b65db9e9b8c6e1081f18cf87e56bd996470c22","0a11002a0f390fb6e4933fead0521032f8a9ede7ced27f75011d8a30c5772376","721bb4554f8e6615dd9e10e28765cf42882c00e1d04f808d8f766b51fdf4d7e6","83b50b18ebfa4402b2c0d2d166565ee90202f080d903fd15cccd1312446a636e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("99e5a83a5f8e9fb7850922aed9a44bbc2b2a03f5fdda215db4d375bd1952536d","3b79aab07b9461a9d4f3c579555ee024888abcda4f5cc23eac5236a56bf740c7","77fa1b6fc7f192b0c983d1f8ecc73effae4f688a49439a7df27e76cfba870d23","032b09bbf1c63afc06afb011d69bafc096d7d925d99e24e3785db5a2957358ec","a871b7708b7dc1eb6fd959946a882a5af7dafc5ac135ac840cfbb60816024933","187e204c5c30b9b56ccc82df510c4c215cdfd37b475d1edba9a0631a4d82ae2e","1252f2bf3817714a8303f7e448930d6d4f797a70ec7effc80f2b1db5e49b9077","7240e51c027e498e71da4006e261409fcf3a5cf5b912d493a9da91199c840059","3039dddbcfb26326ba2e8692316ca674753fa6e1d141c887dc1e9f1ae546ca17","056f373077ca5b6a070975b22839d6f427cbcaeaec4dc31df86231cd3757f7e3","10fc8f8cf1b45a6a6b2b929414a84fc513f80d31b988c3d70f9a21968e943bf2","1bd39e3ee0d59ac691cc644c026b6c5bb3d0713f6e4e2136b94f161558a4444f","e7d165f3728b96921b43984733a92a51148ec87aec900c519a547c470e2a12d9","eebaec0f28addac39549ebf9be659e105046b1c9801381d4c4dd07cfc74d25d6","870f691ec9a83e9c4acce142e0acbf110260e6c8e707410c23c02076244f3973","573631c92d34e7ca2dfc1a590606bd66194d517f8d97dd319169262ac46b3e2e","b29e6b570a96224c874b9fae36b65db9e9b8c6e1081f18cf87e56bd996470c22","0a11002a0f390fb6e4933fead0521032f8a9ede7ced27f75011d8a30c5772376","721bb4554f8e6615dd9e10e28765cf42882c00e1d04f808d8f766b51fdf4d7e6","83b50b18ebfa4402b2c0d2d166565ee90202f080d903fd15cccd1312446a636e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("99e5a83a5f8e9fb7850922aed9a44bbc2b2a03f5fdda215db4d375bd1952536d","3b79aab07b9461a9d4f3c579555ee024888abcda4f5cc23eac5236a56bf740c7","77fa1b6fc7f192b0c983d1f8ecc73effae4f688a49439a7df27e76cfba870d23","032b09bbf1c63afc06afb011d69bafc096d7d925d99e24e3785db5a2957358ec","a871b7708b7dc1eb6fd959946a882a5af7dafc5ac135ac840cfbb60816024933","187e204c5c30b9b56ccc82df510c4c215cdfd37b475d1edba9a0631a4d82ae2e","1252f2bf3817714a8303f7e448930d6d4f797a70ec7effc80f2b1db5e49b9077","7240e51c027e498e71da4006e261409fcf3a5cf5b912d493a9da91199c840059","3039dddbcfb26326ba2e8692316ca674753fa6e1d141c887dc1e9f1ae546ca17","056f373077ca5b6a070975b22839d6f427cbcaeaec4dc31df86231cd3757f7e3","10fc8f8cf1b45a6a6b2b929414a84fc513f80d31b988c3d70f9a21968e943bf2","1bd39e3ee0d59ac691cc644c026b6c5bb3d0713f6e4e2136b94f161558a4444f","e7d165f3728b96921b43984733a92a51148ec87aec900c519a547c470e2a12d9","eebaec0f28addac39549ebf9be659e105046b1c9801381d4c4dd07cfc74d25d6","870f691ec9a83e9c4acce142e0acbf110260e6c8e707410c23c02076244f3973","573631c92d34e7ca2dfc1a590606bd66194d517f8d97dd319169262ac46b3e2e","b29e6b570a96224c874b9fae36b65db9e9b8c6e1081f18cf87e56bd996470c22","0a11002a0f390fb6e4933fead0521032f8a9ede7ced27f75011d8a30c5772376","721bb4554f8e6615dd9e10e28765cf42882c00e1d04f808d8f766b51fdf4d7e6","83b50b18ebfa4402b2c0d2d166565ee90202f080d903fd15cccd1312446a636e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("99e5a83a5f8e9fb7850922aed9a44bbc2b2a03f5fdda215db4d375bd1952536d","3b79aab07b9461a9d4f3c579555ee024888abcda4f5cc23eac5236a56bf740c7","77fa1b6fc7f192b0c983d1f8ecc73effae4f688a49439a7df27e76cfba870d23","032b09bbf1c63afc06afb011d69bafc096d7d925d99e24e3785db5a2957358ec","a871b7708b7dc1eb6fd959946a882a5af7dafc5ac135ac840cfbb60816024933","187e204c5c30b9b56ccc82df510c4c215cdfd37b475d1edba9a0631a4d82ae2e","1252f2bf3817714a8303f7e448930d6d4f797a70ec7effc80f2b1db5e49b9077","7240e51c027e498e71da4006e261409fcf3a5cf5b912d493a9da91199c840059","3039dddbcfb26326ba2e8692316ca674753fa6e1d141c887dc1e9f1ae546ca17","056f373077ca5b6a070975b22839d6f427cbcaeaec4dc31df86231cd3757f7e3","10fc8f8cf1b45a6a6b2b929414a84fc513f80d31b988c3d70f9a21968e943bf2","1bd39e3ee0d59ac691cc644c026b6c5bb3d0713f6e4e2136b94f161558a4444f","e7d165f3728b96921b43984733a92a51148ec87aec900c519a547c470e2a12d9","eebaec0f28addac39549ebf9be659e105046b1c9801381d4c4dd07cfc74d25d6","870f691ec9a83e9c4acce142e0acbf110260e6c8e707410c23c02076244f3973","573631c92d34e7ca2dfc1a590606bd66194d517f8d97dd319169262ac46b3e2e","b29e6b570a96224c874b9fae36b65db9e9b8c6e1081f18cf87e56bd996470c22","0a11002a0f390fb6e4933fead0521032f8a9ede7ced27f75011d8a30c5772376","721bb4554f8e6615dd9e10e28765cf42882c00e1d04f808d8f766b51fdf4d7e6","83b50b18ebfa4402b2c0d2d166565ee90202f080d903fd15cccd1312446a636e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("99e5a83a5f8e9fb7850922aed9a44bbc2b2a03f5fdda215db4d375bd1952536d","3b79aab07b9461a9d4f3c579555ee024888abcda4f5cc23eac5236a56bf740c7","77fa1b6fc7f192b0c983d1f8ecc73effae4f688a49439a7df27e76cfba870d23","032b09bbf1c63afc06afb011d69bafc096d7d925d99e24e3785db5a2957358ec","a871b7708b7dc1eb6fd959946a882a5af7dafc5ac135ac840cfbb60816024933","187e204c5c30b9b56ccc82df510c4c215cdfd37b475d1edba9a0631a4d82ae2e","1252f2bf3817714a8303f7e448930d6d4f797a70ec7effc80f2b1db5e49b9077","7240e51c027e498e71da4006e261409fcf3a5cf5b912d493a9da91199c840059","3039dddbcfb26326ba2e8692316ca674753fa6e1d141c887dc1e9f1ae546ca17","056f373077ca5b6a070975b22839d6f427cbcaeaec4dc31df86231cd3757f7e3","10fc8f8cf1b45a6a6b2b929414a84fc513f80d31b988c3d70f9a21968e943bf2","1bd39e3ee0d59ac691cc644c026b6c5bb3d0713f6e4e2136b94f161558a4444f","e7d165f3728b96921b43984733a92a51148ec87aec900c519a547c470e2a12d9","eebaec0f28addac39549ebf9be659e105046b1c9801381d4c4dd07cfc74d25d6","870f691ec9a83e9c4acce142e0acbf110260e6c8e707410c23c02076244f3973","573631c92d34e7ca2dfc1a590606bd66194d517f8d97dd319169262ac46b3e2e","b29e6b570a96224c874b9fae36b65db9e9b8c6e1081f18cf87e56bd996470c22","0a11002a0f390fb6e4933fead0521032f8a9ede7ced27f75011d8a30c5772376","721bb4554f8e6615dd9e10e28765cf42882c00e1d04f808d8f766b51fdf4d7e6","83b50b18ebfa4402b2c0d2d166565ee90202f080d903fd15cccd1312446a636e")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://on-offtrack.biz/get/uran.ps1","http://spacetruck.biz:82","http://vincentolife.com")
