duplicated block id: 1
size: 36 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:110)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:244)

duplicated block id: 2
size: 23 cleaned lines of code
in 2 files:
 - msticpy/nbtools/nbdisplay.py (231:258)
 - msticpy/vis/entity_graph_tools.py (483:511)

duplicated block id: 3
size: 21 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (34:54)
 - msticpy/data/queries/kql_sent_net.yaml (9:29)

duplicated block id: 4
size: 20 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (117:136)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (235:254)

duplicated block id: 5
size: 19 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:33)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:60)

duplicated block id: 6
size: 19 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (13:31)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (10:28)

duplicated block id: 7
size: 19 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (155:173)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (180:198)

duplicated block id: 8
size: 18 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:32)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:32)

duplicated block id: 9
size: 18 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:32)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:35)

duplicated block id: 10
size: 18 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (125:173)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (342:400)

duplicated block id: 11
size: 17 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (36:52)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (29:45)

duplicated block id: 12
size: 16 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (134:149)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (180:195)

duplicated block id: 13
size: 16 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (134:149)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (155:170)

duplicated block id: 14
size: 16 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (10:25)
 - msticpy/data/queries/kql_mdatp_process.yaml (10:25)

duplicated block id: 15
size: 16 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (88:103)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (109:124)

duplicated block id: 16
size: 15 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (15:29)
 - msticpy/data/queries/kql_sent_winevent.yaml (15:29)

duplicated block id: 17
size: 15 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (44:58)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (41:55)

duplicated block id: 18
size: 15 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (198:244)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (321:372)

duplicated block id: 19
size: 15 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (404:418)
 - msticpy/data/azure/azure_data.py (421:435)

duplicated block id: 20
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:28)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:31)

duplicated block id: 21
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:28)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:28)

duplicated block id: 22
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:28)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:28)

duplicated block id: 23
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:28)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:28)

duplicated block id: 24
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:28)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:58)

duplicated block id: 25
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (214:227)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (334:347)

duplicated block id: 26
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (270:283)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (334:347)

duplicated block id: 27
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:28)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:28)

duplicated block id: 28
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (214:227)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (270:283)

duplicated block id: 29
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:28)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:58)

duplicated block id: 30
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:31)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:55)

duplicated block id: 31
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:28)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:28)

duplicated block id: 32
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (74:87)
 - msticpy/data/queries/kql_sent_o365.yaml (24:37)

duplicated block id: 33
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:28)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:55)

duplicated block id: 34
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:28)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:31)

duplicated block id: 35
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:28)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:58)

duplicated block id: 36
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:28)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:55)

duplicated block id: 37
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:28)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:55)

duplicated block id: 38
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:31)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:58)

duplicated block id: 39
size: 14 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:28)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:58)

duplicated block id: 40
size: 13 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (66:78)
 - msticpy/data/queries/kql_mdatp_network.yaml (68:80)

duplicated block id: 41
size: 13 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (17:29)
 - msticpy/data/queries/kql_sent_winevent.yaml (17:29)

duplicated block id: 42
size: 13 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (17:29)
 - msticpy/data/queries/kql_sent_threatintel.yaml (17:29)

duplicated block id: 43
size: 13 cleaned lines of code
in 2 files:
 - azure-pipelines.yml (64:76)
 - azure-pipelines.yml (145:157)

duplicated block id: 44
size: 13 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:176)
 - msticpy/data/queries/kql_sent_net.yaml (198:210)

duplicated block id: 45
size: 13 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (38:50)
 - msticpy/data/queries/kql_mdatp_network.yaml (38:50)

duplicated block id: 46
size: 13 cleaned lines of code
in 2 files:
 - msticpy/data/queries/splunk_alert_queries.yaml (7:19)
 - msticpy/data/queries/splunk_authentication_queries.yaml (7:19)

duplicated block id: 47
size: 13 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (32:75)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (35:91)

duplicated block id: 48
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (10:21)
 - msticpy/data/queries/kql_sent_alert.yaml (189:200)

duplicated block id: 49
size: 12 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (388:404)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (523:538)

duplicated block id: 50
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (41:52)
 - msticpy/data/queries/kql_sent_winevent.yaml (65:76)

duplicated block id: 51
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (41:52)
 - msticpy/data/queries/kql_sent_winevent.yaml (88:99)

duplicated block id: 52
size: 12 cleaned lines of code
in 2 files:
 - msticpy/common/keyvault_client.py (50:107)
 - msticpy/common/keyvault_client.py (240:276)

duplicated block id: 53
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (10:21)
 - msticpy/data/queries/kql_sent_o365.yaml (10:21)

duplicated block id: 54
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (45:56)
 - msticpy/data/queries/kql_sent_winevent.yaml (88:99)

duplicated block id: 55
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (45:56)
 - msticpy/data/queries/kql_sent_winevent.yaml (65:76)

duplicated block id: 56
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (45:56)
 - msticpy/data/queries/kql_sent_winevent.yaml (41:52)

duplicated block id: 57
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (10:21)
 - msticpy/data/queries/kql_sent_o365.yaml (10:21)

duplicated block id: 58
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (65:76)
 - msticpy/data/queries/kql_sent_winevent.yaml (88:99)

duplicated block id: 59
size: 12 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (10:21)
 - msticpy/data/queries/kql_sent_azure.yaml (10:21)

duplicated block id: 60
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:21)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:29)

duplicated block id: 61
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:29)
 - msticpy/data/queries/kql_sent_o365.yaml (11:21)

duplicated block id: 62
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_user.yaml (11:21)

duplicated block id: 63
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_user.yaml (11:21)

duplicated block id: 64
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:21)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:29)

duplicated block id: 65
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (27:37)
 - msticpy/data/queries/kql_sent_azure.yaml (77:87)

duplicated block id: 66
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_network.yaml (15:25)

duplicated block id: 67
size: 11 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (319:330)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (455:466)

duplicated block id: 68
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:21)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:29)

duplicated block id: 69
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:25)
 - msticpy/data/queries/kql_sent_azure.yaml (11:21)

duplicated block id: 70
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:25)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:29)

duplicated block id: 71
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:21)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:29)

duplicated block id: 72
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_process.yaml (15:25)

duplicated block id: 73
size: 11 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (455:466)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (606:616)

duplicated block id: 74
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:21)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:25)

duplicated block id: 75
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (27:37)
 - msticpy/data/queries/kql_sent_o365.yaml (27:37)

duplicated block id: 76
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:25)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:29)

duplicated block id: 77
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_network.yaml (15:25)

duplicated block id: 78
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:25)
 - msticpy/data/queries/kql_sent_o365.yaml (11:21)

duplicated block id: 79
size: 11 cleaned lines of code
in 2 files:
 - msticpy/nbtools/nbdisplay.py (214:226)
 - msticpy/vis/entity_graph_tools.py (467:479)

duplicated block id: 80
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (88:98)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (205:215)

duplicated block id: 81
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (11:21)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:29)

duplicated block id: 82
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_file.yaml (15:25)

duplicated block id: 83
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_user.yaml (11:21)

duplicated block id: 84
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (11:21)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:29)

duplicated block id: 85
size: 11 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (259:274)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (523:537)

duplicated block id: 86
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_process.yaml (15:25)

duplicated block id: 87
size: 11 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (246:258)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (374:386)

duplicated block id: 88
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:21)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:29)

duplicated block id: 89
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (33:43)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (60:70)

duplicated block id: 90
size: 11 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (259:274)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (388:403)

duplicated block id: 91
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (40:50)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (60:70)

duplicated block id: 92
size: 11 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (365:377)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (503:514)

duplicated block id: 93
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/splunk_queries.yaml (17:27)
 - msticpy/data/queries/sumologic_queries.yaml (17:27)

duplicated block id: 94
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:21)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:29)

duplicated block id: 95
size: 11 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (319:330)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (606:616)

duplicated block id: 96
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:25)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:29)

duplicated block id: 97
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:25)
 - msticpy/data/queries/kql_mdatp_user.yaml (11:21)

duplicated block id: 98
size: 11 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (109:119)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (205:215)

duplicated block id: 99
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:27)
 - msticpy/data/queries/kql_sent_o365.yaml (11:20)

duplicated block id: 100
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:24)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:24)

duplicated block id: 101
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:20)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:24)

duplicated block id: 102
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (11:20)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:54)

duplicated block id: 103
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (19:28)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:54)

duplicated block id: 104
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:24)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:28)

duplicated block id: 105
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:24)
 - msticpy/data/queries/kql_sent_azure.yaml (11:20)

duplicated block id: 106
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:24)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:51)

duplicated block id: 107
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (11:20)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:51)

duplicated block id: 108
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:24)
 - msticpy/data/queries/kql_sent_azure.yaml (11:20)

duplicated block id: 109
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (15:24)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (15:24)

duplicated block id: 110
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:24)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:28)

duplicated block id: 111
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:28)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:54)

duplicated block id: 112
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:20)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:54)

duplicated block id: 113
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:24)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:28)

duplicated block id: 114
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:20)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:24)

duplicated block id: 115
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:145)
 - msticpy/data/queries/kql_sent_alert.yaml (201:210)

duplicated block id: 116
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:28)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:24)

duplicated block id: 117
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:24)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:28)

duplicated block id: 118
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:20)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:24)

duplicated block id: 119
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (15:24)
 - msticpy/data/queries/kql_sent_winevent.yaml (15:24)

duplicated block id: 120
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:20)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:51)

duplicated block id: 121
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:24)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:51)

duplicated block id: 122
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:28)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:27)

duplicated block id: 123
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:24)
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:20)

duplicated block id: 124
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:24)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:51)

duplicated block id: 125
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:20)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:51)

duplicated block id: 126
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:20)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:24)

duplicated block id: 127
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:20)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:24)

duplicated block id: 128
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:20)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:27)

duplicated block id: 129
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:24)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:28)

duplicated block id: 130
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (10:19)
 - msticpy/data/queries/kql_mdatp_user.yaml (10:19)

duplicated block id: 131
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:24)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:24)

duplicated block id: 132
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (185:194)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (199:208)

duplicated block id: 133
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:24)
 - msticpy/data/queries/kql_sent_o365.yaml (11:20)

duplicated block id: 134
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:24)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:24)

duplicated block id: 135
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:24)
 - msticpy/data/queries/kql_sent_o365.yaml (11:20)

duplicated block id: 136
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:24)
 - msticpy/data/queries/kql_sent_o365.yaml (11:20)

duplicated block id: 137
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (10:19)
 - msticpy/data/queries/kql_sent_azure.yaml (10:19)

duplicated block id: 138
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (10:19)
 - msticpy/data/queries/kql_sent_o365.yaml (10:19)

duplicated block id: 139
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:20)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:54)

duplicated block id: 140
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:28)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:51)

duplicated block id: 141
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:28)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:54)

duplicated block id: 142
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (19:28)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:51)

duplicated block id: 143
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:24)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:28)

duplicated block id: 144
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:24)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:24)

duplicated block id: 145
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:24)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:51)

duplicated block id: 146
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:24)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:54)

duplicated block id: 147
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:20)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:27)

duplicated block id: 148
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:24)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:28)

duplicated block id: 149
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:24)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:27)

duplicated block id: 150
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:24)
 - msticpy/data/queries/kql_sent_o365.yaml (11:20)

duplicated block id: 151
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (77:86)
 - msticpy/data/queries/kql_sent_timeseries.yaml (106:115)

duplicated block id: 152
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:28)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:24)

duplicated block id: 153
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:27)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:28)

duplicated block id: 154
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:24)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:51)

duplicated block id: 155
size: 10 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/http_base.py (85:131)
 - msticpy/sectools/tiproviders/kql_base.py (65:110)

duplicated block id: 156
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:28)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:51)

duplicated block id: 157
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:20)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:51)

duplicated block id: 158
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:24)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:28)

duplicated block id: 159
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:27)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:28)

duplicated block id: 160
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:24)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:28)

duplicated block id: 161
size: 10 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:24)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:28)

duplicated block id: 162
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:23)

duplicated block id: 163
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:73)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (90:98)

duplicated block id: 164
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:27)

duplicated block id: 165
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:26)

duplicated block id: 166
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (64:72)
 - msticpy/data/queries/kql_sent_timeseries.yaml (91:99)

duplicated block id: 167
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:26)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 168
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:27)

duplicated block id: 169
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:26)

duplicated block id: 170
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:50)

duplicated block id: 171
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:19)

duplicated block id: 172
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (91:99)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (79:87)

duplicated block id: 173
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:23)

duplicated block id: 174
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (68:76)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (79:87)

duplicated block id: 175
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (157:165)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (242:250)

duplicated block id: 176
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (7:15)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (7:15)

duplicated block id: 177
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:23)

duplicated block id: 178
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:73)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (321:329)

duplicated block id: 179
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:27)

duplicated block id: 180
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/splunk_alert_queries.yaml (11:19)
 - msticpy/data/queries/splunk_queries.yaml (19:27)

duplicated block id: 181
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:23)

duplicated block id: 182
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:50)

duplicated block id: 183
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:26)

duplicated block id: 184
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (28:36)
 - msticpy/data/queries/kql_mdatp_network.yaml (28:36)

duplicated block id: 185
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:23)

duplicated block id: 186
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:26)

duplicated block id: 187
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:23)

duplicated block id: 188
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_o365.yaml (11:19)

duplicated block id: 189
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:53)

duplicated block id: 190
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:23)

duplicated block id: 191
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:23)
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)

duplicated block id: 192
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:27)

duplicated block id: 193
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:23)

duplicated block id: 194
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 195
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:19)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 196
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)
 - msticpy/data/queries/kql_sent_o365.yaml (11:19)

duplicated block id: 197
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:23)

duplicated block id: 198
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (19:27)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (19:27)

duplicated block id: 199
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:27)

duplicated block id: 200
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:23)
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)

duplicated block id: 201
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:50)

duplicated block id: 202
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (124:132)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (157:165)

duplicated block id: 203
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (111:119)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (321:329)

duplicated block id: 204
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:23)

duplicated block id: 205
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:26)

duplicated block id: 206
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/splunk_alert_queries.yaml (11:19)
 - msticpy/data/queries/sumologic_queries.yaml (19:27)

duplicated block id: 207
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:19)
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)

duplicated block id: 208
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:27)

duplicated block id: 209
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:53)

duplicated block id: 210
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (24:32)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (187:195)

duplicated block id: 211
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:27)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 212
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:27)

duplicated block id: 213
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (378:388)
 - msticpy/data/azure/azure_data.py (482:493)

duplicated block id: 214
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 215
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (207:215)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (321:329)

duplicated block id: 216
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:23)

duplicated block id: 217
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 218
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:23)

duplicated block id: 219
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (168:176)
 - msticpy/data/queries/kql_sent_azure.yaml (198:206)

duplicated block id: 220
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:27)

duplicated block id: 221
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:73)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (111:119)

duplicated block id: 222
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:23)

duplicated block id: 223
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:50)

duplicated block id: 224
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_azure.yaml (11:19)

duplicated block id: 225
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:53)

duplicated block id: 226
size: 9 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline.py (456:464)
 - msticpy/nbtools/timeline.py (616:624)

duplicated block id: 227
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:19)
 - msticpy/data/queries/sumologic_queries.yaml (19:27)

duplicated block id: 228
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:27)

duplicated block id: 229
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 230
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:19)
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)

duplicated block id: 231
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:27)

duplicated block id: 232
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:19)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 233
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:27)

duplicated block id: 234
size: 9 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (74:83)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (95:104)

duplicated block id: 235
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:23)

duplicated block id: 236
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_azure.yaml (11:19)

duplicated block id: 237
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:23)
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)

duplicated block id: 238
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:53)

duplicated block id: 239
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)

duplicated block id: 240
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:27)

duplicated block id: 241
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (48:56)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (79:87)

duplicated block id: 242
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_o365.yaml (11:19)

duplicated block id: 243
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:27)

duplicated block id: 244
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:27)

duplicated block id: 245
size: 9 cleaned lines of code
in 2 files:
 - msticpy/analysis/eventcluster.py (44:57)
 - msticpy/analysis/outliers.py (25:36)

duplicated block id: 246
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (44:52)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (79:87)

duplicated block id: 247
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:27)

duplicated block id: 248
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:23)

duplicated block id: 249
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:50)

duplicated block id: 250
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:73)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (207:215)

duplicated block id: 251
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (783:791)
 - msticpy/data/azure/azure_data.py (821:829)

duplicated block id: 252
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (85:93)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (147:155)

duplicated block id: 253
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_azure.yaml (11:19)

duplicated block id: 254
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_o365.yaml (11:19)

duplicated block id: 255
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:19)
 - msticpy/data/queries/splunk_queries.yaml (19:27)

duplicated block id: 256
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:27)

duplicated block id: 257
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:23)

duplicated block id: 258
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (90:98)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (321:329)

duplicated block id: 259
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:19)

duplicated block id: 260
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:50)

duplicated block id: 261
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:23)
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)

duplicated block id: 262
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:19)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:23)

duplicated block id: 263
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:23)

duplicated block id: 264
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:23)
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)

duplicated block id: 265
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:23)
 - msticpy/data/queries/kql_sent_o365.yaml (11:19)

duplicated block id: 266
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:23)

duplicated block id: 267
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:23)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:23)

duplicated block id: 268
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:53)

duplicated block id: 269
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (147:155)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (219:227)

duplicated block id: 270
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:50)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:53)

duplicated block id: 271
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:23)
 - msticpy/data/queries/kql_sent_azure.yaml (11:19)

duplicated block id: 272
size: 9 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:23)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:27)

duplicated block id: 273
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (1:8)
 - msticpy/data/queries/kql_sent_az_network.yaml (1:8)

duplicated block id: 274
size: 8 cleaned lines of code
in 2 files:
 - msticpy/nbtools/nbwidgets/query_time.py (226:233)
 - msticpy/nbtools/nbwidgets/query_time.py (299:306)

duplicated block id: 275
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (68:75)
 - msticpy/data/queries/kql_sent_net.yaml (116:123)

duplicated block id: 276
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (124:131)
 - msticpy/data/queries/kql_sent_o365.yaml (74:81)

duplicated block id: 277
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (39:46)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (134:141)

duplicated block id: 278
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (125:132)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (202:209)

duplicated block id: 279
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (39:46)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (115:122)

duplicated block id: 280
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (57:64)
 - msticpy/data/queries/kql_mdatp_user.yaml (71:78)

duplicated block id: 281
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (64:71)
 - msticpy/data/queries/kql_sent_timeseries.yaml (77:84)

duplicated block id: 282
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:131)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:184)

duplicated block id: 283
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (134:141)
 - msticpy/data/queries/kql_sent_winevent.yaml (17:24)

duplicated block id: 284
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (221:231)
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (784:794)

duplicated block id: 285
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (442:449)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (538:545)

duplicated block id: 286
size: 8 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (139:146)
 - msticpy/nbtools/security_alert.py (163:170)

duplicated block id: 287
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/uploaders/splunk_uploader.py (174:181)
 - msticpy/data/uploaders/splunk_uploader.py (225:232)

duplicated block id: 288
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (89:96)
 - msticpy/data/queries/kql_sent_azure.yaml (111:118)

duplicated block id: 289
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (119:126)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (131:138)

duplicated block id: 290
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (89:96)
 - msticpy/data/queries/kql_sent_azure.yaml (133:140)

duplicated block id: 291
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (228:235)
 - msticpy/data/queries/kql_sent_azure.yaml (249:256)

duplicated block id: 292
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (178:185)
 - msticpy/data/queries/kql_sent_azure.yaml (207:214)

duplicated block id: 293
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (202:209)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (243:250)

duplicated block id: 294
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/data_providers.py (388:395)
 - tools/mp_demo_data.py (180:187)

duplicated block id: 295
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/model.py (569:576)
 - msticpy/analysis/anomalous_sequence/model.py (584:591)

duplicated block id: 296
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (53:60)
 - msticpy/data/queries/kql_sent_timeseries.yaml (64:71)

duplicated block id: 297
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (74:81)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (115:122)

duplicated block id: 298
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (204:211)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (85:92)

duplicated block id: 299
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (64:71)
 - msticpy/data/queries/kql_sent_timeseries.yaml (106:113)

duplicated block id: 300
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (74:81)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (134:141)

duplicated block id: 301
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (53:60)
 - msticpy/data/queries/kql_sent_timeseries.yaml (77:84)

duplicated block id: 302
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/vtlookupv3/vtfile_behavior.py (50:57)
 - msticpy/sectools/vtlookupv3/vtobject_browser.py (23:30)

duplicated block id: 303
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (53:60)
 - msticpy/data/queries/kql_sent_timeseries.yaml (91:98)

duplicated block id: 304
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (68:75)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (95:102)

duplicated block id: 305
size: 8 cleaned lines of code
in 2 files:
 - msticpy/config/ce_simple_settings.py (22:29)
 - msticpy/config/comp_edit.py (217:224)

duplicated block id: 306
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (73:80)
 - msticpy/data/queries/graph_alerts.yaml (170:177)

duplicated block id: 307
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (134:141)
 - msticpy/data/queries/kql_sent_threatintel.yaml (17:24)

duplicated block id: 308
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (94:101)
 - msticpy/data/queries/kql_sent_net.yaml (138:145)

duplicated block id: 309
size: 8 cleaned lines of code
in 2 files:
 - msticpy/config/comp_edit.py (31:38)
 - msticpy/datamodel/pivot_browser.py (40:47)

duplicated block id: 310
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (39:46)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:35)

duplicated block id: 311
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/http_base.py (161:168)
 - msticpy/sectools/tiproviders/open_page_rank.py (230:237)

duplicated block id: 312
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (39:46)
 - msticpy/data/queries/kql_sent_azure.yaml (61:68)

duplicated block id: 313
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (102:109)
 - msticpy/data/queries/kql_sent_o365.yaml (52:59)

duplicated block id: 314
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (24:35)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (25:36)

duplicated block id: 315
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (137:146)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (182:191)

duplicated block id: 316
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (578:585)
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (652:659)

duplicated block id: 317
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (115:122)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (134:141)

duplicated block id: 318
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (111:118)
 - msticpy/data/queries/kql_sent_azure.yaml (133:140)

duplicated block id: 319
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (39:46)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (74:81)

duplicated block id: 320
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/kql_base.py (141:148)
 - msticpy/sectools/tiproviders/open_page_rank.py (57:64)

duplicated block id: 321
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/model.py (569:576)
 - msticpy/analysis/anomalous_sequence/model.py (601:608)

duplicated block id: 322
size: 8 cleaned lines of code
in 2 files:
 - msticpy/config/ce_azure_sentinel.py (60:78)
 - msticpy/config/ce_user_defaults.py (57:75)

duplicated block id: 323
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (134:141)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (17:24)

duplicated block id: 324
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/geoip.py (270:277)
 - msticpy/sectools/geoip.py (507:514)

duplicated block id: 325
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (91:98)
 - msticpy/data/queries/kql_sent_timeseries.yaml (106:113)

duplicated block id: 326
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/kql_base.py (141:148)
 - msticpy/sectools/tiproviders/ti_provider_base.py (272:279)

duplicated block id: 327
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (158:165)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (202:209)

duplicated block id: 328
size: 8 cleaned lines of code
in 2 files:
 - msticpy/common/keyvault_settings.py (189:196)
 - msticpy/common/keyvault_settings.py (228:235)

duplicated block id: 329
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/drivers/splunk_driver.py (69:77)
 - msticpy/data/drivers/sumologic_driver.py (60:68)

duplicated block id: 330
size: 8 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/open_page_rank.py (57:64)
 - msticpy/sectools/tiproviders/ti_provider_base.py (272:279)

duplicated block id: 331
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (331:338)
 - msticpy/data/azure/azure_data.py (441:448)

duplicated block id: 332
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (17:24)
 - msticpy/data/queries/kql_sent_threatintel.yaml (17:24)

duplicated block id: 333
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (7:14)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (7:14)

duplicated block id: 334
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/eventcluster.py (218:225)
 - msticpy/analysis/eventcluster.py (238:245)

duplicated block id: 335
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (77:84)
 - msticpy/data/queries/kql_sent_timeseries.yaml (91:98)

duplicated block id: 336
size: 8 cleaned lines of code
in 2 files:
 - msticpy/config/ce_user_defaults.py (26:55)
 - msticpy/config/ce_user_defaults.py (222:258)

duplicated block id: 337
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (83:90)
 - msticpy/data/queries/graph_alerts.yaml (140:147)

duplicated block id: 338
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:46)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:35)

duplicated block id: 339
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (53:60)
 - msticpy/data/queries/kql_sent_timeseries.yaml (106:113)

duplicated block id: 340
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/model.py (280:288)
 - msticpy/analysis/anomalous_sequence/model.py (305:312)

duplicated block id: 341
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (134:141)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (17:24)

duplicated block id: 342
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/model.py (584:591)
 - msticpy/analysis/anomalous_sequence/model.py (601:608)

duplicated block id: 343
size: 8 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (309:320)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (434:445)

duplicated block id: 344
size: 8 cleaned lines of code
in 2 files:
 - msticpy/nbtools/nbdisplay.py (172:179)
 - msticpy/vis/entity_graph_tools.py (414:421)

duplicated block id: 345
size: 8 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (7:14)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (7:14)

duplicated block id: 346
size: 7 cleaned lines of code
in 2 files:
 - msticpy/resources/mp_pivot_reg.yaml (115:121)
 - msticpy/resources/mp_pivot_reg.yaml (140:146)

duplicated block id: 347
size: 7 cleaned lines of code
in 2 files:
 - msticpy/resources/mp_pivot_reg.yaml (115:121)
 - msticpy/resources/mp_pivot_reg.yaml (127:133)

duplicated block id: 348
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)

duplicated block id: 349
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (340:346)
 - msticpy/data/azure/azure_data.py (450:456)

duplicated block id: 350
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (61:67)
 - msticpy/data/queries/kql_sent_o365.yaml (83:89)

duplicated block id: 351
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (10:16)
 - msticpy/data/queries/splunk_alert_queries.yaml (10:16)

duplicated block id: 352
size: 7 cleaned lines of code
in 2 files:
 - msticpy/sectools/iocextract.py (322:328)
 - msticpy/sectools/iocextract.py (421:427)

duplicated block id: 353
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (41:47)
 - msticpy/data/queries/kql_sent_azure.yaml (10:16)

duplicated block id: 354
size: 7 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline.py (1109:1115)
 - msticpy/nbtools/timeline.py (1119:1125)

duplicated block id: 355
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (41:47)
 - msticpy/data/queries/splunk_authentication_queries.yaml (10:16)

duplicated block id: 356
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (24:30)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (235:241)

duplicated block id: 357
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:94)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:113)

duplicated block id: 358
size: 7 cleaned lines of code
in 2 files:
 - msticpy/resources/mp_pivot_reg.yaml (198:204)
 - msticpy/resources/mp_pivot_reg.yaml (211:217)

duplicated block id: 359
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:61)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:215)

duplicated block id: 360
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:94)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:215)

duplicated block id: 361
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 362
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (142:148)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (173:179)

duplicated block id: 363
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:113)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:215)

duplicated block id: 364
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (52:58)
 - msticpy/data/queries/kql_mdatp_network.yaml (54:60)

duplicated block id: 365
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (61:67)
 - msticpy/data/queries/kql_sent_azure.yaml (10:16)

duplicated block id: 366
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 367
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 368
size: 7 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline.py (469:475)
 - msticpy/nbtools/timeseries.py (228:234)

duplicated block id: 369
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/drivers/mdatp_driver.py (54:78)
 - msticpy/data/drivers/security_graph_driver.py (50:74)

duplicated block id: 370
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (187:193)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (235:241)

duplicated block id: 371
size: 7 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (106:112)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (185:191)

duplicated block id: 372
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)

duplicated block id: 373
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (16:22)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (220:226)

duplicated block id: 374
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)

duplicated block id: 375
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)

duplicated block id: 376
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:94)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:81)

duplicated block id: 377
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 378
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 379
size: 7 cleaned lines of code
in 2 files:
 - tools/create_reqs_all.py (171:177)
 - tools/toollib/import_analyzer.py (116:122)

duplicated block id: 380
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 381
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 382
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 383
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (42:48)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (97:103)

duplicated block id: 384
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 385
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (41:47)
 - msticpy/data/queries/splunk_alert_queries.yaml (10:16)

duplicated block id: 386
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:61)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:113)

duplicated block id: 387
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (10:16)
 - msticpy/data/queries/splunk_authentication_queries.yaml (10:16)

duplicated block id: 388
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (24:30)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (101:107)

duplicated block id: 389
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (10:16)
 - msticpy/data/queries/splunk_alert_queries.yaml (10:16)

duplicated block id: 390
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:81)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:81)

duplicated block id: 391
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:42)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:215)

duplicated block id: 392
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:42)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:81)

duplicated block id: 393
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (89:95)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (118:124)

duplicated block id: 394
size: 7 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (237:244)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (503:510)

duplicated block id: 395
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:42)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:94)

duplicated block id: 396
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (10:16)
 - msticpy/data/queries/splunk_alert_queries.yaml (10:16)

duplicated block id: 397
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)

duplicated block id: 398
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:42)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:61)

duplicated block id: 399
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (16:22)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (86:92)

duplicated block id: 400
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (39:45)
 - msticpy/data/queries/kql_sent_o365.yaml (83:89)

duplicated block id: 401
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (133:139)
 - msticpy/data/queries/kql_sent_o365.yaml (83:89)

duplicated block id: 402
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (10:16)
 - msticpy/data/queries/splunk_authentication_queries.yaml (10:16)

duplicated block id: 403
size: 7 cleaned lines of code
in 2 files:
 - msticpy/sectools/tilookup.py (435:441)
 - msticpy/sectools/tilookup.py (496:502)

duplicated block id: 404
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (125:131)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (188:194)

duplicated block id: 405
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)

duplicated block id: 406
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (61:67)
 - msticpy/data/queries/splunk_authentication_queries.yaml (10:16)

duplicated block id: 407
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (294:300)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (320:326)

duplicated block id: 408
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:81)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:113)

duplicated block id: 409
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (39:45)
 - msticpy/data/queries/kql_sent_azure.yaml (89:95)

duplicated block id: 410
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)

duplicated block id: 411
size: 7 cleaned lines of code
in 2 files:
 - msticpy/nbtools/nbwidgets/select_alert.py (241:249)
 - msticpy/nbtools/nbwidgets/select_item.py (218:226)

duplicated block id: 412
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:81)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:215)

duplicated block id: 413
size: 7 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (275:283)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (396:404)

duplicated block id: 414
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)

duplicated block id: 415
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 416
size: 7 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (106:112)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (140:146)

duplicated block id: 417
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 418
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 419
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)

duplicated block id: 420
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 421
size: 7 cleaned lines of code
in 2 files:
 - msticpy/resources/mp_pivot_reg.yaml (127:133)
 - msticpy/resources/mp_pivot_reg.yaml (140:146)

duplicated block id: 422
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (186:192)
 - msticpy/data/queries/kql_sent_azure.yaml (216:222)

duplicated block id: 423
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (171:177)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (186:192)

duplicated block id: 424
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (61:67)
 - msticpy/data/queries/kql_sent_azure.yaml (133:139)

duplicated block id: 425
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (10:16)
 - msticpy/data/queries/kql_sent_alert.yaml (41:47)

duplicated block id: 426
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:61)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:94)

duplicated block id: 427
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (10:16)
 - msticpy/data/queries/splunk_authentication_queries.yaml (10:16)

duplicated block id: 428
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (685:691)
 - msticpy/data/azure/azure_data.py (694:700)

duplicated block id: 429
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)

duplicated block id: 430
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)

duplicated block id: 431
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (61:67)
 - msticpy/data/queries/kql_sent_azure.yaml (111:117)

duplicated block id: 432
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:61)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:81)

duplicated block id: 433
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)

duplicated block id: 434
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)

duplicated block id: 435
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 436
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (46:52)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (118:124)

duplicated block id: 437
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 438
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (171:177)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (200:206)

duplicated block id: 439
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)

duplicated block id: 440
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/splunk_alert_queries.yaml (21:27)
 - msticpy/data/queries/splunk_authentication_queries.yaml (21:27)

duplicated block id: 441
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)

duplicated block id: 442
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (101:107)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (187:193)

duplicated block id: 443
size: 7 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (217:227)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (329:339)

duplicated block id: 444
size: 7 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/http_base.py (86:129)
 - msticpy/sectools/tiproviders/tor_exit_nodes.py (76:103)

duplicated block id: 445
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:113)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:81)

duplicated block id: 446
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 447
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (10:16)
 - msticpy/data/queries/kql_sent_alert.yaml (61:67)

duplicated block id: 448
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (89:95)
 - msticpy/data/queries/kql_sent_o365.yaml (83:89)

duplicated block id: 449
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (66:72)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (97:103)

duplicated block id: 450
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:42)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:113)

duplicated block id: 451
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (39:45)
 - msticpy/data/queries/kql_sent_azure.yaml (133:139)

duplicated block id: 452
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (61:67)
 - msticpy/data/queries/splunk_alert_queries.yaml (10:16)

duplicated block id: 453
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)

duplicated block id: 454
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 455
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 456
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 457
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (41:47)
 - msticpy/data/queries/kql_sent_alert.yaml (61:67)

duplicated block id: 458
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 459
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (39:45)
 - msticpy/data/queries/kql_sent_azure.yaml (111:117)

duplicated block id: 460
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:42)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:81)

duplicated block id: 461
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 462
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)

duplicated block id: 463
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (46:52)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (97:103)

duplicated block id: 464
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (32:38)

duplicated block id: 465
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (111:117)
 - msticpy/data/queries/kql_sent_o365.yaml (83:89)

duplicated block id: 466
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (42:48)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (118:124)

duplicated block id: 467
size: 7 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/kql_base.py (66:108)
 - msticpy/sectools/tiproviders/tor_exit_nodes.py (76:103)

duplicated block id: 468
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)

duplicated block id: 469
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (10:16)
 - msticpy/data/queries/kql_sent_alert.yaml (41:47)

duplicated block id: 470
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (10:16)
 - msticpy/data/queries/splunk_authentication_queries.yaml (10:16)

duplicated block id: 471
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/query_defns.py (53:60)
 - msticpy/data/query_defns.py (112:119)

duplicated block id: 472
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:81)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:94)

duplicated block id: 473
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 474
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (10:16)
 - msticpy/data/queries/kql_sent_alert.yaml (61:67)

duplicated block id: 475
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (16:22)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (148:154)

duplicated block id: 476
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (61:67)
 - msticpy/data/queries/kql_sent_o365.yaml (10:16)

duplicated block id: 477
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)

duplicated block id: 478
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (283:290)
 - msticpy/data/azure/azure_data.py (482:489)

duplicated block id: 479
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 480
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)

duplicated block id: 481
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)

duplicated block id: 482
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/uploaders/splunk_uploader.py (138:163)
 - msticpy/data/uploaders/splunk_uploader.py (186:211)

duplicated block id: 483
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:61)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:81)

duplicated block id: 484
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)

duplicated block id: 485
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (10:16)
 - msticpy/data/queries/splunk_alert_queries.yaml (10:16)

duplicated block id: 486
size: 7 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline.py (647:653)
 - msticpy/nbtools/timeline.py (657:663)

duplicated block id: 487
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)

duplicated block id: 488
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 489
size: 7 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline.py (726:732)
 - msticpy/nbtools/timeseries.py (171:177)

duplicated block id: 490
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (158:164)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (188:194)

duplicated block id: 491
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_threatintel.yaml (45:51)

duplicated block id: 492
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)
 - msticpy/data/queries/kql_sent_threatintel.yaml (157:163)

duplicated block id: 493
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (50:56)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (147:153)

duplicated block id: 494
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (89:95)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (97:103)

duplicated block id: 495
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (188:194)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (243:249)

duplicated block id: 496
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (283:290)
 - msticpy/data/azure/azure_data.py (378:384)

duplicated block id: 497
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (41:47)
 - msticpy/data/queries/kql_sent_o365.yaml (10:16)

duplicated block id: 498
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (29:35)
 - msticpy/data/queries/kql_sent_threatintel.yaml (32:38)

duplicated block id: 499
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)
 - msticpy/data/queries/kql_sent_threatintel.yaml (111:117)

duplicated block id: 500
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)
 - msticpy/data/queries/kql_sent_threatintel.yaml (94:100)

duplicated block id: 501
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (75:81)
 - msticpy/data/queries/kql_sent_threatintel.yaml (135:141)

duplicated block id: 502
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (66:72)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (118:124)

duplicated block id: 503
size: 7 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (61:67)
 - msticpy/data/queries/kql_sent_azure.yaml (89:95)

duplicated block id: 504
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 505
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 506
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/mail_message.py (84:89)

duplicated block id: 507
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 508
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/model.py (262:267)
 - msticpy/analysis/anomalous_sequence/model.py (305:310)

duplicated block id: 509
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)

duplicated block id: 510
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)

duplicated block id: 511
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 512
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)

duplicated block id: 513
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 514
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 515
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (207:212)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (295:300)

duplicated block id: 516
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (189:194)
 - msticpy/data/azure/azure_data.py (378:383)

duplicated block id: 517
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 518
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (50:55)
 - msticpy/data/queries/kql_sent_az_dns.yaml (69:74)

duplicated block id: 519
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/model.py (219:224)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (118:123)

duplicated block id: 520
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 521
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 522
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 523
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host.py (51:56)
 - msticpy/datamodel/entities/mail_cluster.py (62:67)

duplicated block id: 524
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 525
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 526
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:60)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)

duplicated block id: 527
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 528
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 529
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 530
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 531
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (157:162)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (207:212)

duplicated block id: 532
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 533
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/file_hash.py (37:42)
 - msticpy/datamodel/entities/mail_message.py (84:89)

duplicated block id: 534
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 535
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/file_hash.py (37:42)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 536
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:112)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)

duplicated block id: 537
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 538
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/ip_address.py (41:46)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 539
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_incidents.py (413:418)
 - msticpy/data/azure/sentinel_incidents.py (449:454)

duplicated block id: 540
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 541
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (128:133)
 - msticpy/data/queries/graph_alerts.yaml (180:185)

duplicated block id: 542
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 543
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 544
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (112:117)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 545
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 546
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 547
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 548
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 549
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 550
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 551
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)

duplicated block id: 552
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 553
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 554
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)

duplicated block id: 555
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host.py (51:56)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 556
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)

duplicated block id: 557
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/host_logon_session.py (45:50)

duplicated block id: 558
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 559
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (182:187)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (321:326)

duplicated block id: 560
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)

duplicated block id: 561
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 562
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 563
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 564
size: 6 cleaned lines of code
in 2 files:
 - msticpy/config/ce_azure_sentinel.py (130:135)
 - msticpy/config/ce_user_defaults.py (128:133)

duplicated block id: 565
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 566
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 567
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 568
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/file_hash.py (37:42)
 - msticpy/datamodel/entities/host.py (51:56)

duplicated block id: 569
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 570
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 571
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 572
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/ip_address.py (41:46)
 - msticpy/datamodel/entities/mail_message.py (84:89)

duplicated block id: 573
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:112)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)

duplicated block id: 574
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 575
size: 6 cleaned lines of code
in 2 files:
 - msticpy/resources/mpconfig_defaults.yaml (122:128)
 - msticpy/resources/mpconfig_defaults.yaml (172:179)

duplicated block id: 576
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 577
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)

duplicated block id: 578
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 579
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)

duplicated block id: 580
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 581
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)

duplicated block id: 582
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 583
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 584
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/ip_address.py (41:46)

duplicated block id: 585
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 586
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (33:38)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 587
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 588
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (141:146)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (157:162)

duplicated block id: 589
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 590
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 591
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 592
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)

duplicated block id: 593
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 594
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)

duplicated block id: 595
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)

duplicated block id: 596
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 597
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/file_hash.py (37:42)
 - msticpy/datamodel/entities/mail_cluster.py (62:67)

duplicated block id: 598
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)

duplicated block id: 599
size: 6 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline.py (371:376)
 - msticpy/nbtools/timeline.py (587:592)

duplicated block id: 600
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (198:203)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (448:453)

duplicated block id: 601
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 602
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:60)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)

duplicated block id: 603
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 604
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 605
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (158:163)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 606
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 607
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:80)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)

duplicated block id: 608
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)

duplicated block id: 609
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)

duplicated block id: 610
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:93)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)

duplicated block id: 611
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (239:244)
 - msticpy/data/azure/azure_data.py (562:567)

duplicated block id: 612
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (283:288)
 - msticpy/data/azure/azure_data.py (562:567)

duplicated block id: 613
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 614
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (321:326)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (448:453)

duplicated block id: 615
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)

duplicated block id: 616
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)

duplicated block id: 617
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 618
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/mail_cluster.py (62:67)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 619
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/sectools_magics.py (41:46)
 - msticpy/sectools/sectools_magics.py (109:114)

duplicated block id: 620
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 621
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:93)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)

duplicated block id: 622
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 623
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 624
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)

duplicated block id: 625
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 626
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 627
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:80)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)

duplicated block id: 628
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)

duplicated block id: 629
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (103:108)
 - msticpy/data/queries/kql_sent_threatintel.yaml (149:154)

duplicated block id: 630
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/mail_message.py (84:89)

duplicated block id: 631
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_analytics.py (210:215)
 - msticpy/data/azure/sentinel_incidents.py (449:454)

duplicated block id: 632
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 633
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 634
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 635
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 636
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 637
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/model.py (262:267)
 - msticpy/analysis/anomalous_sequence/model.py (280:286)

duplicated block id: 638
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 639
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 640
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 641
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 642
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_analytics.py (210:215)
 - msticpy/data/azure/sentinel_incidents.py (413:418)

duplicated block id: 643
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 644
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 645
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)

duplicated block id: 646
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 647
size: 6 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline_pd_accessor.py (181:186)
 - msticpy/vis/mp_pandas_plot.py (178:183)

duplicated block id: 648
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 649
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (35:40)
 - msticpy/data/queries/kql_sent_winevent.yaml (58:63)

duplicated block id: 650
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (93:98)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (233:238)

duplicated block id: 651
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)

duplicated block id: 652
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 653
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)

duplicated block id: 654
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)

duplicated block id: 655
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)

duplicated block id: 656
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 657
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 658
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 659
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)

duplicated block id: 660
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host_logon_session.py (45:50)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 661
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 662
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (36:41)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (19:24)

duplicated block id: 663
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/mail_message.py (84:89)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 664
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 665
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (88:93)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)

duplicated block id: 666
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)

duplicated block id: 667
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/iocextract.py (331:336)
 - msticpy/sectools/iocextract.py (430:435)

duplicated block id: 668
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (90:95)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (182:187)

duplicated block id: 669
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 670
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (189:194)
 - msticpy/data/azure/azure_data.py (283:288)

duplicated block id: 671
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)

duplicated block id: 672
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)

duplicated block id: 673
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 674
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 675
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (111:116)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (136:141)

duplicated block id: 676
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)

duplicated block id: 677
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 678
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (41:46)
 - msticpy/data/queries/kql_sent_o365.yaml (63:68)

duplicated block id: 679
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 680
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 681
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)

duplicated block id: 682
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (189:194)
 - msticpy/data/azure/azure_data.py (239:244)

duplicated block id: 683
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 684
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (33:38)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 685
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (111:116)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (157:162)

duplicated block id: 686
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)

duplicated block id: 687
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 688
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 689
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (41:46)
 - msticpy/data/queries/kql_sent_o365.yaml (85:90)

duplicated block id: 690
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 691
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 692
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 693
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)

duplicated block id: 694
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)

duplicated block id: 695
size: 6 cleaned lines of code
in 2 files:
 - msticpy/resources/mp_pivot_reg.yaml (127:132)
 - msticpy/resources/mp_pivot_reg.yaml (159:164)

duplicated block id: 696
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (30:35)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 697
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 698
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (90:95)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (136:141)

duplicated block id: 699
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (36:41)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (19:24)

duplicated block id: 700
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 701
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 702
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 703
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 704
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 705
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (671:676)
 - msticpy/data/azure/azure_data.py (736:741)

duplicated block id: 706
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 707
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (90:95)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (157:162)

duplicated block id: 708
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 709
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/mail_cluster.py (62:67)

duplicated block id: 710
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 711
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 712
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/ip_address.py (41:46)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 713
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/geoip.py (660:665)
 - msticpy/sectools/geoip.py (669:674)

duplicated block id: 714
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)

duplicated block id: 715
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 716
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (53:59)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (95:101)

duplicated block id: 717
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_network.yaml (83:88)

duplicated block id: 718
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)

duplicated block id: 719
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 720
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (153:159)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (208:214)

duplicated block id: 721
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)

duplicated block id: 722
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 723
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 724
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (107:112)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)

duplicated block id: 725
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 726
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)

duplicated block id: 727
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host.py (51:56)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 728
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 729
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 730
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)

duplicated block id: 731
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 732
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (120:125)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (218:223)

duplicated block id: 733
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (413:454)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (549:603)

duplicated block id: 734
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 735
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 736
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 737
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host.py (51:56)
 - msticpy/datamodel/entities/mail_message.py (84:89)

duplicated block id: 738
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)

duplicated block id: 739
size: 6 cleaned lines of code
in 2 files:
 - msticpy/common/keyvault_client.py (102:107)
 - msticpy/common/secret_settings.py (154:159)

duplicated block id: 740
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 741
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 742
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 743
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_incidents.py (248:253)
 - msticpy/data/azure/sentinel_incidents.py (318:323)

duplicated block id: 744
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/kql_base.py (177:182)
 - msticpy/sectools/tiproviders/open_page_rank.py (95:100)

duplicated block id: 745
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_analytics.py (210:215)
 - msticpy/data/azure/sentinel_incidents.py (320:325)

duplicated block id: 746
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)

duplicated block id: 747
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 748
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (141:146)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (242:247)

duplicated block id: 749
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 750
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (124:129)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (141:146)

duplicated block id: 751
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 752
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 753
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)

duplicated block id: 754
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 755
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 756
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)

duplicated block id: 757
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host.py (51:56)
 - msticpy/datamodel/entities/ip_address.py (41:46)

duplicated block id: 758
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_only.py (53:59)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (74:80)

duplicated block id: 759
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 760
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 761
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 762
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:214)

duplicated block id: 763
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (136:141)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (321:326)

duplicated block id: 764
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 765
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 766
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (283:288)
 - msticpy/data/azure/azure_data.py (736:741)

duplicated block id: 767
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 768
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (28:33)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (160:165)

duplicated block id: 769
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 770
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 771
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 772
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 773
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 774
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_bookmarks.py (85:90)
 - msticpy/data/azure/sentinel_incidents.py (447:452)

duplicated block id: 775
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (182:187)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (207:212)

duplicated block id: 776
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (283:288)
 - msticpy/data/azure/azure_data.py (671:676)

duplicated block id: 777
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 778
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (239:244)
 - msticpy/data/azure/azure_data.py (671:676)

duplicated block id: 779
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/pivot_register.py (309:314)
 - msticpy/datamodel/pivot_register.py (322:327)

duplicated block id: 780
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)

duplicated block id: 781
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (239:244)
 - msticpy/data/azure/azure_data.py (736:741)

duplicated block id: 782
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:70)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (295:300)

duplicated block id: 783
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 784
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)

duplicated block id: 785
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)

duplicated block id: 786
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/ip_address.py (41:46)
 - msticpy/datamodel/entities/mail_cluster.py (62:67)

duplicated block id: 787
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)

duplicated block id: 788
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 789
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (157:162)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (321:326)

duplicated block id: 790
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 791
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:80)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)

duplicated block id: 792
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/data_obfus.py (156:161)
 - msticpy/data/data_obfus.py (165:170)

duplicated block id: 793
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (63:68)
 - msticpy/data/queries/kql_sent_azure.yaml (157:162)

duplicated block id: 794
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 795
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (189:194)
 - msticpy/data/azure/azure_data.py (736:741)

duplicated block id: 796
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 797
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 798
size: 6 cleaned lines of code
in 2 files:
 - msticpy/common/keyvault_client.py (271:276)
 - msticpy/common/secret_settings.py (154:159)

duplicated block id: 799
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 800
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/ip_address.py (41:46)

duplicated block id: 801
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (148:153)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 802
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 803
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/file_hash.py (37:42)
 - msticpy/datamodel/entities/ip_address.py (41:46)

duplicated block id: 804
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)

duplicated block id: 805
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)

duplicated block id: 806
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 807
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (95:100)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 808
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 809
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 810
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 811
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 812
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/http_base.py (86:127)
 - msticpy/sectools/tiproviders/riskiq.py (148:173)

duplicated block id: 813
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 814
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)

duplicated block id: 815
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 816
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)

duplicated block id: 817
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 818
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)

duplicated block id: 819
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:70)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (136:141)

duplicated block id: 820
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/geoip.py (236:241)
 - msticpy/sectools/geoip.py (480:485)

duplicated block id: 821
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/host.py (51:56)

duplicated block id: 822
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 823
size: 6 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline.py (367:373)
 - msticpy/nbtools/timeseries.py (148:154)

duplicated block id: 824
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)

duplicated block id: 825
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/drivers/mordor_driver.py (117:145)
 - msticpy/data/drivers/splunk_driver.py (171:199)

duplicated block id: 826
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 827
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 828
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 829
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/file_hash.py (37:42)

duplicated block id: 830
size: 6 cleaned lines of code
in 2 files:
 - msticpy/config/compound_ctrls.py (252:257)
 - msticpy/config/compound_ctrls.py (293:298)

duplicated block id: 831
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 832
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 833
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 834
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 835
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 836
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 837
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 838
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 839
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 840
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)

duplicated block id: 841
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 842
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 843
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 844
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 845
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 846
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)

duplicated block id: 847
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)

duplicated block id: 848
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (189:194)
 - msticpy/data/azure/azure_data.py (671:676)

duplicated block id: 849
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:41)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)

duplicated block id: 850
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 851
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)

duplicated block id: 852
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 853
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 854
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 855
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)

duplicated block id: 856
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 857
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_azure.yaml (11:16)

duplicated block id: 858
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (378:383)
 - msticpy/data/azure/azure_data.py (562:567)

duplicated block id: 859
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/data_obfus.py (218:223)
 - msticpy/data/data_obfus.py (248:253)

duplicated block id: 860
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 861
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 862
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 863
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 864
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (136:141)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (295:300)

duplicated block id: 865
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)

duplicated block id: 866
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)

duplicated block id: 867
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/mailbox.py (42:47)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 868
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)

duplicated block id: 869
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (41:46)
 - msticpy/data/queries/kql_sent_azure.yaml (157:162)

duplicated block id: 870
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (29:34)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (19:24)

duplicated block id: 871
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 872
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (239:244)
 - msticpy/data/azure/azure_data.py (283:288)

duplicated block id: 873
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_incidents.py (320:325)
 - msticpy/data/azure/sentinel_incidents.py (449:454)

duplicated block id: 874
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)

duplicated block id: 875
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:41)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)

duplicated block id: 876
size: 6 cleaned lines of code
in 2 files:
 - msticpy/resources/mp_pivot_reg.yaml (115:120)
 - msticpy/resources/mp_pivot_reg.yaml (159:164)

duplicated block id: 877
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (136:141)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 878
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/sentinel_incidents.py (320:325)
 - msticpy/data/azure/sentinel_incidents.py (413:418)

duplicated block id: 879
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)

duplicated block id: 880
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/kql_base.py (66:107)
 - msticpy/sectools/tiproviders/riskiq.py (148:173)

duplicated block id: 881
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)

duplicated block id: 882
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 883
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 884
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (111:116)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (182:187)

duplicated block id: 885
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (157:162)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (295:300)

duplicated block id: 886
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (111:116)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (295:300)

duplicated block id: 887
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)

duplicated block id: 888
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/file_hash.py (37:42)
 - msticpy/datamodel/entities/host_logon_session.py (45:50)

duplicated block id: 889
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 890
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/mail_message.py (84:89)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 891
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (90:95)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (295:300)

duplicated block id: 892
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/geoip.py (78:83)
 - msticpy/sectools/geoip.py (480:485)

duplicated block id: 893
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/file_hash.py (37:42)
 - msticpy/datamodel/entities/url.py (37:42)

duplicated block id: 894
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 895
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:214)

duplicated block id: 896
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/host.py (51:56)

duplicated block id: 897
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 898
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)

duplicated block id: 899
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)

duplicated block id: 900
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 901
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (482:487)
 - msticpy/data/azure/azure_data.py (562:567)

duplicated block id: 902
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (373:378)
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (484:489)

duplicated block id: 903
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (209:214)

duplicated block id: 904
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/tiproviders/riskiq.py (148:173)
 - msticpy/sectools/tiproviders/tor_exit_nodes.py (76:101)

duplicated block id: 905
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 906
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host.py (51:56)
 - msticpy/datamodel/entities/host_logon_session.py (45:50)

duplicated block id: 907
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 908
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 909
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 910
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)

duplicated block id: 911
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)

duplicated block id: 912
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (36:41)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)

duplicated block id: 913
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 914
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 915
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 916
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/mail_cluster.py (62:67)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 917
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 918
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 919
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (46:51)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 920
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:80)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)

duplicated block id: 921
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 922
size: 6 cleaned lines of code
in 2 files:
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py (149:154)
 - msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py (196:201)

duplicated block id: 923
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (189:194)
 - msticpy/data/azure/azure_data.py (562:567)

duplicated block id: 924
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)

duplicated block id: 925
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 926
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 927
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 928
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (51:56)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 929
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)

duplicated block id: 930
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 931
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (28:33)
 - msticpy/data/queries/kql_mdatp_network.yaml (83:88)

duplicated block id: 932
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 933
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)

duplicated block id: 934
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 935
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)

duplicated block id: 936
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 937
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 938
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 939
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 940
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)

duplicated block id: 941
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)

duplicated block id: 942
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_hunting.yaml (11:16)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 943
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (255:260)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (106:111)

duplicated block id: 944
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/file_hash.py (37:42)

duplicated block id: 945
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 946
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 947
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 948
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)

duplicated block id: 949
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)

duplicated block id: 950
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/geoip.py (78:83)
 - msticpy/sectools/geoip.py (236:241)

duplicated block id: 951
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_o365.yaml (63:68)
 - msticpy/data/queries/kql_sent_o365.yaml (85:90)

duplicated block id: 952
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxauditd.yaml (15:20)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 953
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 954
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 955
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)

duplicated block id: 956
size: 6 cleaned lines of code
in 2 files:
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (274:279)
 - msticpy/sectools/vtlookupv3/vtlookupv3.py (335:340)

duplicated block id: 957
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 958
size: 6 cleaned lines of code
in 2 files:
 - msticpy/config/compound_ctrls.py (15:27)
 - msticpy/config/mp_config_file.py (21:32)

duplicated block id: 959
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 960
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 961
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (55:60)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)

duplicated block id: 962
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent.yaml (19:24)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 963
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 964
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 965
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_network.yaml (55:60)

duplicated block id: 966
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)

duplicated block id: 967
size: 6 cleaned lines of code
in 2 files:
 - msticpy/nbtools/timeline_pd_accessor.py (239:244)
 - msticpy/vis/mp_pandas_plot.py (236:241)

duplicated block id: 968
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 969
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 970
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (42:47)

duplicated block id: 971
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 972
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 973
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host_logon_session.py (45:50)
 - msticpy/datamodel/entities/mail_message.py (84:89)

duplicated block id: 974
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 975
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/alert.py (56:61)
 - msticpy/datamodel/entities/host_logon_session.py (45:50)

duplicated block id: 976
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)

duplicated block id: 977
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 978
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 979
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (15:20)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 980
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)

duplicated block id: 981
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (164:169)
 - msticpy/data/queries/kql_sent_alert.yaml (130:135)

duplicated block id: 982
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 983
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (378:383)
 - msticpy/data/azure/azure_data.py (736:741)

duplicated block id: 984
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_file.yaml (28:33)

duplicated block id: 985
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/cloud_logon_session.py (40:45)
 - msticpy/datamodel/entities/mail_cluster.py (62:67)

duplicated block id: 986
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)

duplicated block id: 987
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 988
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_file.yaml (43:48)

duplicated block id: 989
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 990
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/graph_alerts.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 991
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (75:80)

duplicated block id: 992
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)
 - msticpy/data/queries/kql_mdatp_network.yaml (39:44)

duplicated block id: 993
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host_logon_session.py (45:50)
 - msticpy/datamodel/entities/mailbox.py (42:47)

duplicated block id: 994
size: 6 cleaned lines of code
in 2 files:
 - msticpy/resources/mp_pivot_reg.yaml (140:145)
 - msticpy/resources/mp_pivot_reg.yaml (159:164)

duplicated block id: 995
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (182:187)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (295:300)

duplicated block id: 996
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_file.yaml (57:62)

duplicated block id: 997
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azure.yaml (238:243)
 - msticpy/data/queries/kql_sent_azure.yaml (258:263)

duplicated block id: 998
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 999
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/kql_sent_o365.yaml (11:16)

duplicated block id: 1000
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 1001
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)
 - msticpy/data/queries/kql_mdatp_process.yaml (43:48)

duplicated block id: 1002
size: 6 cleaned lines of code
in 2 files:
 - msticpy/config/ce_provider_base.py (91:97)
 - msticpy/config/ce_user_defaults.py (73:79)

duplicated block id: 1003
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 1004
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 1005
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/pivot_magic_core.py (86:91)
 - msticpy/datamodel/pivot_magic_core.py (97:102)

duplicated block id: 1006
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 1007
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 1008
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 1009
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)

duplicated block id: 1010
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host_logon_session.py (45:50)
 - msticpy/datamodel/entities/ip_address.py (41:46)

duplicated block id: 1011
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_dns.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 1012
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (164:169)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 1013
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)

duplicated block id: 1014
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (239:244)
 - msticpy/data/azure/azure_data.py (482:487)

duplicated block id: 1015
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (482:487)
 - msticpy/data/azure/azure_data.py (671:676)

duplicated block id: 1016
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 1017
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (136:141)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (207:212)

duplicated block id: 1018
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (48:53)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (124:129)

duplicated block id: 1019
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 1020
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (201:206)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 1021
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/splunk_queries.yaml (19:24)

duplicated block id: 1022
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:70)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (157:162)

duplicated block id: 1023
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (562:567)
 - msticpy/data/azure/azure_data.py (671:676)

duplicated block id: 1024
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 1025
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_alerts.yaml (81:86)

duplicated block id: 1026
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (62:67)
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (15:20)

duplicated block id: 1027
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/host_logon_session.py (45:50)
 - msticpy/datamodel/entities/mail_cluster.py (62:67)

duplicated block id: 1028
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 1029
size: 6 cleaned lines of code
in 2 files:
 - msticpy/nbtools/nbwidgets/get_environment_key.py (70:75)
 - msticpy/nbtools/nbwidgets/get_text.py (58:63)

duplicated block id: 1030
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 1031
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)

duplicated block id: 1032
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_process.yaml (15:20)
 - msticpy/data/queries/splunk_alert_queries.yaml (11:16)

duplicated block id: 1033
size: 6 cleaned lines of code
in 2 files:
 - msticpy/datamodel/entities/mail_cluster.py (62:67)
 - msticpy/datamodel/entities/mail_message.py (84:89)

duplicated block id: 1034
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (69:74)
 - msticpy/data/queries/kql_mdatp_process.yaml (28:33)

duplicated block id: 1035
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (18:23)
 - msticpy/data/queries/kql_sent_timeseries.yaml (12:17)

duplicated block id: 1036
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (68:73)
 - msticpy/data/queries/kql_sent_net.yaml (37:42)

duplicated block id: 1037
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/splunk_authentication_queries.yaml (11:16)

duplicated block id: 1038
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (189:194)
 - msticpy/data/azure/azure_data.py (482:487)

duplicated block id: 1039
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (482:487)
 - msticpy/data/azure/azure_data.py (736:741)

duplicated block id: 1040
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (65:70)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (182:187)

duplicated block id: 1041
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 1042
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_process.yaml (71:76)

duplicated block id: 1043
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_threatintel.yaml (76:81)
 - msticpy/data/queries/kql_sent_winevent.yaml (102:107)

duplicated block id: 1044
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_user.yaml (11:16)
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)

duplicated block id: 1045
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (378:383)
 - msticpy/data/azure/azure_data.py (671:676)

duplicated block id: 1046
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_azuresentinel.yaml (19:24)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 1047
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_activity.yaml (75:80)
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (177:182)

duplicated block id: 1048
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_file.yaml (15:20)
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)

duplicated block id: 1049
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (562:567)
 - msticpy/data/azure/azure_data.py (736:741)

duplicated block id: 1050
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 1051
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (164:169)

duplicated block id: 1052
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (42:47)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (42:47)

duplicated block id: 1053
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/azure/azure_data.py (239:244)
 - msticpy/data/azure/azure_data.py (378:383)

duplicated block id: 1054
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_apps.yaml (29:34)
 - msticpy/data/queries/kql_sent_winevent_proc.yaml (19:24)

duplicated block id: 1055
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_net.yaml (198:203)
 - msticpy/data/queries/kql_sent_threatintel.yaml (19:24)

duplicated block id: 1056
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_heartbeat_info.yaml (19:24)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (45:50)

duplicated block id: 1057
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_az_network.yaml (15:20)
 - msticpy/data/queries/kql_sent_net.yaml (198:203)

duplicated block id: 1058
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (39:44)
 - msticpy/data/queries/kql_mdatp_process.yaml (57:62)

duplicated block id: 1059
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_mdatp_alerts.yaml (53:58)
 - msticpy/data/queries/kql_mdatp_alerts.yaml (67:72)

duplicated block id: 1060
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_alert.yaml (136:141)
 - msticpy/data/queries/sumologic_queries.yaml (19:24)

duplicated block id: 1061
size: 6 cleaned lines of code
in 2 files:
 - msticpy/data/queries/kql_sent_lxsyslog_logon.yaml (289:294)
 - msticpy/data/queries/kql_sent_winevent_logon.yaml (177:182)