Cyber Kill Chain host=firewall block 192.168.1.128 | stats count rt-30m rt none value block 0 1 1 standard absolute after 1 1 search ["0x65a637","0xd93f3c"] [0] host=snort "192.168.1.128,7001,10.10.10.128" | stats count rt-30m rt none value block 0 ["0x65a637","0xd93f3c"] [0] 1 1 standard absolute after 1 1 search host=snort "192.168.1.128,7002,10.10.10.128" | stats count rt-30m rt none value block 0 ["0x65a637","0xd93f3c"] [0] 1 1 standard absolute after 1 1 search host=snort "192.168.1.128,7003,10.10.10.128" | stats count rt-30m rt none value block 0 ["0x65a637","0xd93f3c"] [0] 1 1 standard absolute after 1 1 search host=firewall block 192.168.1.128 | timechart count rt-30m rt line ellipsisNone 0 collapsed collapsed visible linear linear 0 inherit 50 10 area gaps none 0.01 default shiny none 0 0 ellipsisMiddle none host=snort "192.168.1.128,7001,10.10.10.128" | timechart count rt-30m rt line ellipsisNone 0 collapsed collapsed visible linear linear 0 inherit 50 10 area gaps none 0.01 default shiny all 0 0 ellipsisMiddle none host=snort "192.168.1.128,7002,10.10.10.128" | timechart count rt-30m rt line ellipsisNone 0 collapsed collapsed visible linear linear 0 inherit 50 10 area gaps none 0.01 default shiny all 0 0 ellipsisMiddle none host=snort "192.168.1.128,7003,10.10.10.128" | timechart count rt-30m rt line ellipsisNone 0 collapsed collapsed visible linear linear 0 inherit 50 10 area gaps none 0.01 default shiny all 0 0 ellipsisMiddle none