index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("156.96.46.116","188.34.185.85","212.103.61.74","192.154.224.126","23.29.115.180","104.237.218.74","23.82.128.144")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1326932d63485e299ba8e03bfcd23057f7897c3ae0d26ed1235c4fb108adb105","2a3b660e19b56dad92ba45dd164d300e9bd9c3b17736004878f45ee23a0177ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1326932d63485e299ba8e03bfcd23057f7897c3ae0d26ed1235c4fb108adb105","2a3b660e19b56dad92ba45dd164d300e9bd9c3b17736004878f45ee23a0177ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1326932d63485e299ba8e03bfcd23057f7897c3ae0d26ed1235c4fb108adb105","2a3b660e19b56dad92ba45dd164d300e9bd9c3b17736004878f45ee23a0177ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1326932d63485e299ba8e03bfcd23057f7897c3ae0d26ed1235c4fb108adb105","2a3b660e19b56dad92ba45dd164d300e9bd9c3b17736004878f45ee23a0177ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1326932d63485e299ba8e03bfcd23057f7897c3ae0d26ed1235c4fb108adb105","2a3b660e19b56dad92ba45dd164d300e9bd9c3b17736004878f45ee23a0177ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1326932d63485e299ba8e03bfcd23057f7897c3ae0d26ed1235c4fb108adb105","2a3b660e19b56dad92ba45dd164d300e9bd9c3b17736004878f45ee23a0177ac")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "vm-srv-1.gel.ulaval.ca")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "vm-srv-1.gel.ulaval.ca")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "vm-srv-1.gel.ulaval.ca")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://satkas.waw.pl/rainloop/forecast")
