index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("http://24.229.150.54:995/t4","108.179.193.34","69.192.185.238","108.179.192.18","23.111.163.242")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("4bcef200fb69f976240e7bc43ab3783dc195eac8b350e610ed2942a78c2ba568","4cf403ac9297eeda584e8f3789bebbdc615a021de9f69c32113a7d0817ff","784047cef1ef8150e31a64f23fbb4db0b286117103e076382ff20832db039c0a","8163c4746d970efe150d30919298de7be67365c935a35bc2107569fba7a33407","89281a47a404bfae5b61348fb57757dfe6890239ea0a41de46f18422383db092","b80bf513afcf562570431d9fb5e33189a9b654ab5cef1a9bf71e0cc0f0580655","d770e4c6ba54ec00cf038aa50b838758b8c4162ca53d1ee1198789e3cbc310a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4bcef200fb69f976240e7bc43ab3783dc195eac8b350e610ed2942a78c2ba568","4cf403ac9297eeda584e8f3789bebbdc615a021de9f69c32113a7d0817ff","784047cef1ef8150e31a64f23fbb4db0b286117103e076382ff20832db039c0a","8163c4746d970efe150d30919298de7be67365c935a35bc2107569fba7a33407","89281a47a404bfae5b61348fb57757dfe6890239ea0a41de46f18422383db092","b80bf513afcf562570431d9fb5e33189a9b654ab5cef1a9bf71e0cc0f0580655","d770e4c6ba54ec00cf038aa50b838758b8c4162ca53d1ee1198789e3cbc310a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4bcef200fb69f976240e7bc43ab3783dc195eac8b350e610ed2942a78c2ba568","4cf403ac9297eeda584e8f3789bebbdc615a021de9f69c32113a7d0817ff","784047cef1ef8150e31a64f23fbb4db0b286117103e076382ff20832db039c0a","8163c4746d970efe150d30919298de7be67365c935a35bc2107569fba7a33407","89281a47a404bfae5b61348fb57757dfe6890239ea0a41de46f18422383db092","b80bf513afcf562570431d9fb5e33189a9b654ab5cef1a9bf71e0cc0f0580655","d770e4c6ba54ec00cf038aa50b838758b8c4162ca53d1ee1198789e3cbc310a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("4bcef200fb69f976240e7bc43ab3783dc195eac8b350e610ed2942a78c2ba568","4cf403ac9297eeda584e8f3789bebbdc615a021de9f69c32113a7d0817ff","784047cef1ef8150e31a64f23fbb4db0b286117103e076382ff20832db039c0a","8163c4746d970efe150d30919298de7be67365c935a35bc2107569fba7a33407","89281a47a404bfae5b61348fb57757dfe6890239ea0a41de46f18422383db092","b80bf513afcf562570431d9fb5e33189a9b654ab5cef1a9bf71e0cc0f0580655","d770e4c6ba54ec00cf038aa50b838758b8c4162ca53d1ee1198789e3cbc310a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4bcef200fb69f976240e7bc43ab3783dc195eac8b350e610ed2942a78c2ba568","4cf403ac9297eeda584e8f3789bebbdc615a021de9f69c32113a7d0817ff","784047cef1ef8150e31a64f23fbb4db0b286117103e076382ff20832db039c0a","8163c4746d970efe150d30919298de7be67365c935a35bc2107569fba7a33407","89281a47a404bfae5b61348fb57757dfe6890239ea0a41de46f18422383db092","b80bf513afcf562570431d9fb5e33189a9b654ab5cef1a9bf71e0cc0f0580655","d770e4c6ba54ec00cf038aa50b838758b8c4162ca53d1ee1198789e3cbc310a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4bcef200fb69f976240e7bc43ab3783dc195eac8b350e610ed2942a78c2ba568","4cf403ac9297eeda584e8f3789bebbdc615a021de9f69c32113a7d0817ff","784047cef1ef8150e31a64f23fbb4db0b286117103e076382ff20832db039c0a","8163c4746d970efe150d30919298de7be67365c935a35bc2107569fba7a33407","89281a47a404bfae5b61348fb57757dfe6890239ea0a41de46f18422383db092","b80bf513afcf562570431d9fb5e33189a9b654ab5cef1a9bf71e0cc0f0580655","d770e4c6ba54ec00cf038aa50b838758b8c4162ca53d1ee1198789e3cbc310a")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aayomsolutions.co.in" OR destinationhostname CONTAINS "" OR destinationhostname CONTAINS "aparnashealthfoundation.aayom.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aayomsolutions.co.in" OR destinationhostname CONTAINS "" OR destinationhostname CONTAINS "aparnashealthfoundation.aayom.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aayomsolutions.co.in" OR destinationhostname CONTAINS "" OR destinationhostname CONTAINS "aparnashealthfoundation.aayom.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://headlinepost.net/3AkrPbRj/x.html","https://dongarza.com/gJW5ma382Z/x.html","https://taketuitions.com/dTEOdMByori/j.html","https://constructorachg.cl/eFSLb6eV/j.html,;","https://oel.tg/MSOFjh0EXRR8/j.html","https://imprimija.com.br/BIt2Zlm3/y5.html","http://stunningmax.com/JR3xNs7W7Wm1/y1.html","https: //decinfo.com.br/s4hfZyv7NFEM/y9.html","https: //omoaye.com.br/Z0U7Ivtd04b/r.html","https://mcdreamconcept.ng/9jFVONntA9x/r.html","https://agoryum.com/lPLd50ViH4X9/r.html","https://arancal.com/HgLCgCS3m/be.html","https://iperdesk.com/JWqj8R2nt/be.html","https://grandthum.co.in/9Z6DH5h5g/be.html")
