11 duplicated lines in:
  - hunting/azure/queries/entra_excessive_non_interactive_sfa_sign_ins_across_users.toml (35:45, 20%)
  - rules/integrations/azure/credential_access_entra_password_spraying_non_interactive_sfa.toml (104:114, 8%)

8 duplicated lines in:
  - hunting/azure/queries/entra_excessive_non_interactive_sfa_sign_ins_across_users.toml (26:33, 14%)
  - rules/integrations/azure/credential_access_entra_password_spraying_non_interactive_sfa.toml (95:102, 6%)

7 duplicated lines in:
  - hunting/aws/queries/signin_single_factor_console_login_via_federated_session.toml (19:25, 25%)
  - rules/integrations/aws/initial_access_signin_console_login_no_mfa.toml (72:78, 8%)

7 duplicated lines in:
  - hunting/macos/queries/defense_evasion_self_deleted_python_script_outbound_network_connection.toml (22:28, 19%)
  - rules/macos/execution_scripting_osascript_exec_followed_by_netcon.toml (65:71, 6%)

6 duplicated lines in:
  - hunting/aws/queries/servicequotas_discovery_multi_region_get_service_quota_calls.toml (36:43, 16%)
  - rules/integrations/aws/discovery_servicequotas_multi_region_service_quota_requests.toml (55:62, 6%)

6 duplicated lines in:
  - hunting/aws/queries/servicequotas_discovery_multi_region_get_service_quota_calls.toml (36:43, 16%)
  - rules/integrations/aws/discovery_ec2_multi_region_describe_instances.toml (100:107, 5%)

6 duplicated lines in:
  - hunting/aws/queries/servicequotas_discovery_multi_region_get_service_quota_calls.toml (27:34, 16%)
  - rules/integrations/aws/discovery_servicequotas_multi_region_service_quota_requests.toml (43:50, 6%)

6 duplicated lines in:
  - hunting/aws/queries/ec2_discovery_multi_region_describe_instance_calls.toml (28:35, 19%)
  - rules/integrations/aws/discovery_servicequotas_multi_region_service_quota_requests.toml (55:62, 6%)

6 duplicated lines in:
  - hunting/aws/queries/ec2_discovery_multi_region_describe_instance_calls.toml (28:35, 19%)
  - rules/integrations/aws/discovery_ec2_multi_region_describe_instances.toml (100:107, 5%)