index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("51.195.68.217","185.193.127.92","185.193.126.172")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("109106feea31a3a6f534c7d923f2d9f7","7f8593f741e29a2a2a61e947694445f438b33380","8900cf88a91fa4fbe871385c8747c7097537f1b5f4a003418d84c01dc383dd75","fd59dd7bb54210a99c1ed677bbfc03a8","292c3602eb0213c9a0123fdaae522830de3fad95","c9db4f661a86286ad47ad92dfb544b702dca8ffe1641e276b42bec4cde7ba9b4","6b567779bbc95b9e151c6a6132606dfe","a0de69ab52dc997ff19a18b7a6827e2beeac63bc","80721e6b2d6168cf17b41d2f1ab0f1e6e3bf4db585754109f3b7ff9931ae9e5b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("109106feea31a3a6f534c7d923f2d9f7","7f8593f741e29a2a2a61e947694445f438b33380","8900cf88a91fa4fbe871385c8747c7097537f1b5f4a003418d84c01dc383dd75","fd59dd7bb54210a99c1ed677bbfc03a8","292c3602eb0213c9a0123fdaae522830de3fad95","c9db4f661a86286ad47ad92dfb544b702dca8ffe1641e276b42bec4cde7ba9b4","6b567779bbc95b9e151c6a6132606dfe","a0de69ab52dc997ff19a18b7a6827e2beeac63bc","80721e6b2d6168cf17b41d2f1ab0f1e6e3bf4db585754109f3b7ff9931ae9e5b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("109106feea31a3a6f534c7d923f2d9f7","7f8593f741e29a2a2a61e947694445f438b33380","8900cf88a91fa4fbe871385c8747c7097537f1b5f4a003418d84c01dc383dd75","fd59dd7bb54210a99c1ed677bbfc03a8","292c3602eb0213c9a0123fdaae522830de3fad95","c9db4f661a86286ad47ad92dfb544b702dca8ffe1641e276b42bec4cde7ba9b4","6b567779bbc95b9e151c6a6132606dfe","a0de69ab52dc997ff19a18b7a6827e2beeac63bc","80721e6b2d6168cf17b41d2f1ab0f1e6e3bf4db585754109f3b7ff9931ae9e5b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("109106feea31a3a6f534c7d923f2d9f7","7f8593f741e29a2a2a61e947694445f438b33380","8900cf88a91fa4fbe871385c8747c7097537f1b5f4a003418d84c01dc383dd75","fd59dd7bb54210a99c1ed677bbfc03a8","292c3602eb0213c9a0123fdaae522830de3fad95","c9db4f661a86286ad47ad92dfb544b702dca8ffe1641e276b42bec4cde7ba9b4","6b567779bbc95b9e151c6a6132606dfe","a0de69ab52dc997ff19a18b7a6827e2beeac63bc","80721e6b2d6168cf17b41d2f1ab0f1e6e3bf4db585754109f3b7ff9931ae9e5b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("109106feea31a3a6f534c7d923f2d9f7","7f8593f741e29a2a2a61e947694445f438b33380","8900cf88a91fa4fbe871385c8747c7097537f1b5f4a003418d84c01dc383dd75","fd59dd7bb54210a99c1ed677bbfc03a8","292c3602eb0213c9a0123fdaae522830de3fad95","c9db4f661a86286ad47ad92dfb544b702dca8ffe1641e276b42bec4cde7ba9b4","6b567779bbc95b9e151c6a6132606dfe","a0de69ab52dc997ff19a18b7a6827e2beeac63bc","80721e6b2d6168cf17b41d2f1ab0f1e6e3bf4db585754109f3b7ff9931ae9e5b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("109106feea31a3a6f534c7d923f2d9f7","7f8593f741e29a2a2a61e947694445f438b33380","8900cf88a91fa4fbe871385c8747c7097537f1b5f4a003418d84c01dc383dd75","fd59dd7bb54210a99c1ed677bbfc03a8","292c3602eb0213c9a0123fdaae522830de3fad95","c9db4f661a86286ad47ad92dfb544b702dca8ffe1641e276b42bec4cde7ba9b4","6b567779bbc95b9e151c6a6132606dfe","a0de69ab52dc997ff19a18b7a6827e2beeac63bc","80721e6b2d6168cf17b41d2f1ab0f1e6e3bf4db585754109f3b7ff9931ae9e5b")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.softhouse.store")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.softhouse.store")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.softhouse.store")
