index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("93.95.227.64")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("93.95.227.64")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("93.95.227.64")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("93.95.227.64")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("93.95.227.64")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b46764c046e0db26e6f43f46364ac0acad173541e7134611cb64e091db7b7ced","44cb9c1e139a06a86442c92b596a653659132fbc92986a2f5338630c90200af1","acbb4f3f9a13845de0c1c23f06dcb554817e610318e57718e63ce6a57af4911c","791ce0a733ccf19ddccda8fa4c748d804460c5f5c61d8a3cdc41a0620f469991")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b46764c046e0db26e6f43f46364ac0acad173541e7134611cb64e091db7b7ced","44cb9c1e139a06a86442c92b596a653659132fbc92986a2f5338630c90200af1","acbb4f3f9a13845de0c1c23f06dcb554817e610318e57718e63ce6a57af4911c","791ce0a733ccf19ddccda8fa4c748d804460c5f5c61d8a3cdc41a0620f469991")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b46764c046e0db26e6f43f46364ac0acad173541e7134611cb64e091db7b7ced","44cb9c1e139a06a86442c92b596a653659132fbc92986a2f5338630c90200af1","acbb4f3f9a13845de0c1c23f06dcb554817e610318e57718e63ce6a57af4911c","791ce0a733ccf19ddccda8fa4c748d804460c5f5c61d8a3cdc41a0620f469991")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b46764c046e0db26e6f43f46364ac0acad173541e7134611cb64e091db7b7ced","44cb9c1e139a06a86442c92b596a653659132fbc92986a2f5338630c90200af1","acbb4f3f9a13845de0c1c23f06dcb554817e610318e57718e63ce6a57af4911c","791ce0a733ccf19ddccda8fa4c748d804460c5f5c61d8a3cdc41a0620f469991")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b46764c046e0db26e6f43f46364ac0acad173541e7134611cb64e091db7b7ced","44cb9c1e139a06a86442c92b596a653659132fbc92986a2f5338630c90200af1","acbb4f3f9a13845de0c1c23f06dcb554817e610318e57718e63ce6a57af4911c","791ce0a733ccf19ddccda8fa4c748d804460c5f5c61d8a3cdc41a0620f469991")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b46764c046e0db26e6f43f46364ac0acad173541e7134611cb64e091db7b7ced","44cb9c1e139a06a86442c92b596a653659132fbc92986a2f5338630c90200af1","acbb4f3f9a13845de0c1c23f06dcb554817e610318e57718e63ce6a57af4911c","791ce0a733ccf19ddccda8fa4c748d804460c5f5c61d8a3cdc41a0620f469991")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gulf.moneroocean.stream")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gulf.moneroocean.stream")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gulf.moneroocean.stream")
