The following TQL query is for Cisco ASA evidence.Identify IP addresses performing scans of the external environmentclass:cisco_asa_threat_detection | groupby policy