index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("37.120.193.123","40.115.162.72","157.245.70.127","31.44.184.82","185.153.199.176")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7b6f996cc1ad4b5e131e7bf9b1c33253","2841848ef59dfe7137e15119e4c9ce5e873e3607","b14341b1ffe9e2730394b9066c6829b4e2f59a4234765ae2e97cfc6d4593730a","ba83831700a73661f99d38d7505b5646","209ffbc8ba1e93167bca9b67e0ad3561c065595d","79d6b1b6b1ecb446b0f49772bf4da63fcec6f6bfc7c2e1f4924cb7acbb3b4f53","3fe1a3aaca999a5db936843c9bdfea14","25ebe54beb3c422ccd2d90aa8ae89087f71b0bed","e82cc49c03320a0fb6ec3512c0ca3332eb1b40070cc53a78bc80b77b4aba975c","d907be57b5ef2af8a8b45d5f87aa4773","867d41458d94e985f6b3e2bae1dfb75e14cbc57f","4b5eefa1727b97b6f773be3937a8cc390f0434ddc2f01dc24b68b690fafbcc93","ee2f71faced3f5b5b202c7576f0f52b9","d1ff26ea3d2d2ced4b7e76d971a60533817048d7","5cd95b34782ca5acf8a34d9dc184cb880a19b6edcaf4a4553fa0619b597c2f50","99c7cad7032ec5add3a21582a64bb149","4de5d433af5701462517719ce097bb4c0e5676c9","7f4bdf94a0e0457f41bdd1a8d8d9fc39fc383d3d0a331048828d391bbf727a1e","72a60d799ae9e4f0a3443a2f96fb4896","a304497ff076348e098310f530779002a326c264","6d5ca42906c60caa7d3e0564b011d20b87b175cbd9d44a96673b46a82b07df68","ce3a6224dae98fdaa712cfa6495cb72349f333133dbfb339c9e90699cbe4e8e","141b2190f51397dbd0dfde0e3904b264c91b6f81febc823ff0c33da980b69944","1d142c36c6cdd393fe543a6b7782f25a9cbafca17a1cfa0f3fc0f5a9431dbf3f","81bdd622f0cb9d7e2ac5325a74606fa7818bd4205f37184eba68cdcbe96942f6","d010fbb1afeb610338c49ae2425b6b7c4a9f4c469aedd096a15b32527565d7db","7e765942d89cd3bfaca41034cd959b8d741085bd8bcedbb741e15ed685227a5e","05f90cad3627f5253e1a03156793bc6cada7f4ce0d510f55139f0285fcff589d","EEDC68C92C50BE88C5935651D6B772D4728C3566581BE1F24D4CE7EF63A76D2E","3468C6DEB3827F5C161A8622E7D794444C7B38225F6F15002193D2572A4D132E","02B17677BEC8A4FBB77FDDB347BFDCC651FF2B25187131CCE45C326E3CF42FE5","188E66158E0F96AD1FFD3F090E2570B8644CD80733C7AAFB931E893A4F280165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7b6f996cc1ad4b5e131e7bf9b1c33253","2841848ef59dfe7137e15119e4c9ce5e873e3607","b14341b1ffe9e2730394b9066c6829b4e2f59a4234765ae2e97cfc6d4593730a","ba83831700a73661f99d38d7505b5646","209ffbc8ba1e93167bca9b67e0ad3561c065595d","79d6b1b6b1ecb446b0f49772bf4da63fcec6f6bfc7c2e1f4924cb7acbb3b4f53","3fe1a3aaca999a5db936843c9bdfea14","25ebe54beb3c422ccd2d90aa8ae89087f71b0bed","e82cc49c03320a0fb6ec3512c0ca3332eb1b40070cc53a78bc80b77b4aba975c","d907be57b5ef2af8a8b45d5f87aa4773","867d41458d94e985f6b3e2bae1dfb75e14cbc57f","4b5eefa1727b97b6f773be3937a8cc390f0434ddc2f01dc24b68b690fafbcc93","ee2f71faced3f5b5b202c7576f0f52b9","d1ff26ea3d2d2ced4b7e76d971a60533817048d7","5cd95b34782ca5acf8a34d9dc184cb880a19b6edcaf4a4553fa0619b597c2f50","99c7cad7032ec5add3a21582a64bb149","4de5d433af5701462517719ce097bb4c0e5676c9","7f4bdf94a0e0457f41bdd1a8d8d9fc39fc383d3d0a331048828d391bbf727a1e","72a60d799ae9e4f0a3443a2f96fb4896","a304497ff076348e098310f530779002a326c264","6d5ca42906c60caa7d3e0564b011d20b87b175cbd9d44a96673b46a82b07df68","ce3a6224dae98fdaa712cfa6495cb72349f333133dbfb339c9e90699cbe4e8e","141b2190f51397dbd0dfde0e3904b264c91b6f81febc823ff0c33da980b69944","1d142c36c6cdd393fe543a6b7782f25a9cbafca17a1cfa0f3fc0f5a9431dbf3f","81bdd622f0cb9d7e2ac5325a74606fa7818bd4205f37184eba68cdcbe96942f6","d010fbb1afeb610338c49ae2425b6b7c4a9f4c469aedd096a15b32527565d7db","7e765942d89cd3bfaca41034cd959b8d741085bd8bcedbb741e15ed685227a5e","05f90cad3627f5253e1a03156793bc6cada7f4ce0d510f55139f0285fcff589d","EEDC68C92C50BE88C5935651D6B772D4728C3566581BE1F24D4CE7EF63A76D2E","3468C6DEB3827F5C161A8622E7D794444C7B38225F6F15002193D2572A4D132E","02B17677BEC8A4FBB77FDDB347BFDCC651FF2B25187131CCE45C326E3CF42FE5","188E66158E0F96AD1FFD3F090E2570B8644CD80733C7AAFB931E893A4F280165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7b6f996cc1ad4b5e131e7bf9b1c33253","2841848ef59dfe7137e15119e4c9ce5e873e3607","b14341b1ffe9e2730394b9066c6829b4e2f59a4234765ae2e97cfc6d4593730a","ba83831700a73661f99d38d7505b5646","209ffbc8ba1e93167bca9b67e0ad3561c065595d","79d6b1b6b1ecb446b0f49772bf4da63fcec6f6bfc7c2e1f4924cb7acbb3b4f53","3fe1a3aaca999a5db936843c9bdfea14","25ebe54beb3c422ccd2d90aa8ae89087f71b0bed","e82cc49c03320a0fb6ec3512c0ca3332eb1b40070cc53a78bc80b77b4aba975c","d907be57b5ef2af8a8b45d5f87aa4773","867d41458d94e985f6b3e2bae1dfb75e14cbc57f","4b5eefa1727b97b6f773be3937a8cc390f0434ddc2f01dc24b68b690fafbcc93","ee2f71faced3f5b5b202c7576f0f52b9","d1ff26ea3d2d2ced4b7e76d971a60533817048d7","5cd95b34782ca5acf8a34d9dc184cb880a19b6edcaf4a4553fa0619b597c2f50","99c7cad7032ec5add3a21582a64bb149","4de5d433af5701462517719ce097bb4c0e5676c9","7f4bdf94a0e0457f41bdd1a8d8d9fc39fc383d3d0a331048828d391bbf727a1e","72a60d799ae9e4f0a3443a2f96fb4896","a304497ff076348e098310f530779002a326c264","6d5ca42906c60caa7d3e0564b011d20b87b175cbd9d44a96673b46a82b07df68","ce3a6224dae98fdaa712cfa6495cb72349f333133dbfb339c9e90699cbe4e8e","141b2190f51397dbd0dfde0e3904b264c91b6f81febc823ff0c33da980b69944","1d142c36c6cdd393fe543a6b7782f25a9cbafca17a1cfa0f3fc0f5a9431dbf3f","81bdd622f0cb9d7e2ac5325a74606fa7818bd4205f37184eba68cdcbe96942f6","d010fbb1afeb610338c49ae2425b6b7c4a9f4c469aedd096a15b32527565d7db","7e765942d89cd3bfaca41034cd959b8d741085bd8bcedbb741e15ed685227a5e","05f90cad3627f5253e1a03156793bc6cada7f4ce0d510f55139f0285fcff589d","EEDC68C92C50BE88C5935651D6B772D4728C3566581BE1F24D4CE7EF63A76D2E","3468C6DEB3827F5C161A8622E7D794444C7B38225F6F15002193D2572A4D132E","02B17677BEC8A4FBB77FDDB347BFDCC651FF2B25187131CCE45C326E3CF42FE5","188E66158E0F96AD1FFD3F090E2570B8644CD80733C7AAFB931E893A4F280165")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7b6f996cc1ad4b5e131e7bf9b1c33253","2841848ef59dfe7137e15119e4c9ce5e873e3607","b14341b1ffe9e2730394b9066c6829b4e2f59a4234765ae2e97cfc6d4593730a","ba83831700a73661f99d38d7505b5646","209ffbc8ba1e93167bca9b67e0ad3561c065595d","79d6b1b6b1ecb446b0f49772bf4da63fcec6f6bfc7c2e1f4924cb7acbb3b4f53","3fe1a3aaca999a5db936843c9bdfea14","25ebe54beb3c422ccd2d90aa8ae89087f71b0bed","e82cc49c03320a0fb6ec3512c0ca3332eb1b40070cc53a78bc80b77b4aba975c","d907be57b5ef2af8a8b45d5f87aa4773","867d41458d94e985f6b3e2bae1dfb75e14cbc57f","4b5eefa1727b97b6f773be3937a8cc390f0434ddc2f01dc24b68b690fafbcc93","ee2f71faced3f5b5b202c7576f0f52b9","d1ff26ea3d2d2ced4b7e76d971a60533817048d7","5cd95b34782ca5acf8a34d9dc184cb880a19b6edcaf4a4553fa0619b597c2f50","99c7cad7032ec5add3a21582a64bb149","4de5d433af5701462517719ce097bb4c0e5676c9","7f4bdf94a0e0457f41bdd1a8d8d9fc39fc383d3d0a331048828d391bbf727a1e","72a60d799ae9e4f0a3443a2f96fb4896","a304497ff076348e098310f530779002a326c264","6d5ca42906c60caa7d3e0564b011d20b87b175cbd9d44a96673b46a82b07df68","ce3a6224dae98fdaa712cfa6495cb72349f333133dbfb339c9e90699cbe4e8e","141b2190f51397dbd0dfde0e3904b264c91b6f81febc823ff0c33da980b69944","1d142c36c6cdd393fe543a6b7782f25a9cbafca17a1cfa0f3fc0f5a9431dbf3f","81bdd622f0cb9d7e2ac5325a74606fa7818bd4205f37184eba68cdcbe96942f6","d010fbb1afeb610338c49ae2425b6b7c4a9f4c469aedd096a15b32527565d7db","7e765942d89cd3bfaca41034cd959b8d741085bd8bcedbb741e15ed685227a5e","05f90cad3627f5253e1a03156793bc6cada7f4ce0d510f55139f0285fcff589d","EEDC68C92C50BE88C5935651D6B772D4728C3566581BE1F24D4CE7EF63A76D2E","3468C6DEB3827F5C161A8622E7D794444C7B38225F6F15002193D2572A4D132E","02B17677BEC8A4FBB77FDDB347BFDCC651FF2B25187131CCE45C326E3CF42FE5","188E66158E0F96AD1FFD3F090E2570B8644CD80733C7AAFB931E893A4F280165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7b6f996cc1ad4b5e131e7bf9b1c33253","2841848ef59dfe7137e15119e4c9ce5e873e3607","b14341b1ffe9e2730394b9066c6829b4e2f59a4234765ae2e97cfc6d4593730a","ba83831700a73661f99d38d7505b5646","209ffbc8ba1e93167bca9b67e0ad3561c065595d","79d6b1b6b1ecb446b0f49772bf4da63fcec6f6bfc7c2e1f4924cb7acbb3b4f53","3fe1a3aaca999a5db936843c9bdfea14","25ebe54beb3c422ccd2d90aa8ae89087f71b0bed","e82cc49c03320a0fb6ec3512c0ca3332eb1b40070cc53a78bc80b77b4aba975c","d907be57b5ef2af8a8b45d5f87aa4773","867d41458d94e985f6b3e2bae1dfb75e14cbc57f","4b5eefa1727b97b6f773be3937a8cc390f0434ddc2f01dc24b68b690fafbcc93","ee2f71faced3f5b5b202c7576f0f52b9","d1ff26ea3d2d2ced4b7e76d971a60533817048d7","5cd95b34782ca5acf8a34d9dc184cb880a19b6edcaf4a4553fa0619b597c2f50","99c7cad7032ec5add3a21582a64bb149","4de5d433af5701462517719ce097bb4c0e5676c9","7f4bdf94a0e0457f41bdd1a8d8d9fc39fc383d3d0a331048828d391bbf727a1e","72a60d799ae9e4f0a3443a2f96fb4896","a304497ff076348e098310f530779002a326c264","6d5ca42906c60caa7d3e0564b011d20b87b175cbd9d44a96673b46a82b07df68","ce3a6224dae98fdaa712cfa6495cb72349f333133dbfb339c9e90699cbe4e8e","141b2190f51397dbd0dfde0e3904b264c91b6f81febc823ff0c33da980b69944","1d142c36c6cdd393fe543a6b7782f25a9cbafca17a1cfa0f3fc0f5a9431dbf3f","81bdd622f0cb9d7e2ac5325a74606fa7818bd4205f37184eba68cdcbe96942f6","d010fbb1afeb610338c49ae2425b6b7c4a9f4c469aedd096a15b32527565d7db","7e765942d89cd3bfaca41034cd959b8d741085bd8bcedbb741e15ed685227a5e","05f90cad3627f5253e1a03156793bc6cada7f4ce0d510f55139f0285fcff589d","EEDC68C92C50BE88C5935651D6B772D4728C3566581BE1F24D4CE7EF63A76D2E","3468C6DEB3827F5C161A8622E7D794444C7B38225F6F15002193D2572A4D132E","02B17677BEC8A4FBB77FDDB347BFDCC651FF2B25187131CCE45C326E3CF42FE5","188E66158E0F96AD1FFD3F090E2570B8644CD80733C7AAFB931E893A4F280165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7b6f996cc1ad4b5e131e7bf9b1c33253","2841848ef59dfe7137e15119e4c9ce5e873e3607","b14341b1ffe9e2730394b9066c6829b4e2f59a4234765ae2e97cfc6d4593730a","ba83831700a73661f99d38d7505b5646","209ffbc8ba1e93167bca9b67e0ad3561c065595d","79d6b1b6b1ecb446b0f49772bf4da63fcec6f6bfc7c2e1f4924cb7acbb3b4f53","3fe1a3aaca999a5db936843c9bdfea14","25ebe54beb3c422ccd2d90aa8ae89087f71b0bed","e82cc49c03320a0fb6ec3512c0ca3332eb1b40070cc53a78bc80b77b4aba975c","d907be57b5ef2af8a8b45d5f87aa4773","867d41458d94e985f6b3e2bae1dfb75e14cbc57f","4b5eefa1727b97b6f773be3937a8cc390f0434ddc2f01dc24b68b690fafbcc93","ee2f71faced3f5b5b202c7576f0f52b9","d1ff26ea3d2d2ced4b7e76d971a60533817048d7","5cd95b34782ca5acf8a34d9dc184cb880a19b6edcaf4a4553fa0619b597c2f50","99c7cad7032ec5add3a21582a64bb149","4de5d433af5701462517719ce097bb4c0e5676c9","7f4bdf94a0e0457f41bdd1a8d8d9fc39fc383d3d0a331048828d391bbf727a1e","72a60d799ae9e4f0a3443a2f96fb4896","a304497ff076348e098310f530779002a326c264","6d5ca42906c60caa7d3e0564b011d20b87b175cbd9d44a96673b46a82b07df68","ce3a6224dae98fdaa712cfa6495cb72349f333133dbfb339c9e90699cbe4e8e","141b2190f51397dbd0dfde0e3904b264c91b6f81febc823ff0c33da980b69944","1d142c36c6cdd393fe543a6b7782f25a9cbafca17a1cfa0f3fc0f5a9431dbf3f","81bdd622f0cb9d7e2ac5325a74606fa7818bd4205f37184eba68cdcbe96942f6","d010fbb1afeb610338c49ae2425b6b7c4a9f4c469aedd096a15b32527565d7db","7e765942d89cd3bfaca41034cd959b8d741085bd8bcedbb741e15ed685227a5e","05f90cad3627f5253e1a03156793bc6cada7f4ce0d510f55139f0285fcff589d","EEDC68C92C50BE88C5935651D6B772D4728C3566581BE1F24D4CE7EF63A76D2E","3468C6DEB3827F5C161A8622E7D794444C7B38225F6F15002193D2572A4D132E","02B17677BEC8A4FBB77FDDB347BFDCC651FF2B25187131CCE45C326E3CF42FE5","188E66158E0F96AD1FFD3F090E2570B8644CD80733C7AAFB931E893A4F280165")
