msticpy/data/queries/kql_sent_az_network.yaml [34:54]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
            FlowStartTime = FlowStartTime_t,
            FlowEndTime = FlowEndTime_t,
            FlowIntervalEndTime = FlowIntervalEndTime_t,
            FlowType = FlowType_s,
            ResourceGroup = split(VM_s, "/")[0],
            VMName = split(VM_s, "/")[1],
            VMIPAddress = VMIP_s,
            PublicIPs = extractall(@"([\d\.]+)[|\d]+", dynamic([1]), PublicIPs_s),
            SrcIP = SrcIP_s,
            DestIP = DestIP_s,
            ExtIP = iif(FlowDirection_s == "I", SrcIP_s, DestIP_s),
            L4Protocol = L4Protocol_s,
            L7Protocol = L7Protocol_s,
            DestPort = DestPort_d,
            FlowDirection = FlowDirection_s,
            AllowedOutFlows = AllowedOutFlows_d,
            AllowedInFlows = AllowedInFlows_d,
            DeniedInFlows = DeniedInFlows_d,
            DeniedOutFlows = DeniedOutFlows_d,
            RemoteRegion = AzureRegion_s,
            VMRegion = Region_s'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



msticpy/data/queries/kql_sent_net.yaml [9:29]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        FlowStartTime = FlowStartTime_t,
        FlowEndTime = FlowEndTime_t,
        FlowIntervalEndTime = FlowIntervalEndTime_t,
        FlowType = FlowType_s,
        ResourceGroup = split(VM_s, "/")[0],
        VMName = split(VM_s, "/")[1],
        VMIPAddress = VMIP_s,
        PublicIPs = extractall(@"([\d\.]+)[|\d]+", dynamic([1]), PublicIPs_s),
        SrcIP = SrcIP_s,
        DestIP = DestIP_s,
        ExtIP = iif(FlowDirection_s == "I", SrcIP_s, DestIP_s),
        L4Protocol = L4Protocol_s,
        L7Protocol = L7Protocol_s,
        DestPort = DestPort_d,
        FlowDirection = FlowDirection_s,
        AllowedOutFlows = AllowedOutFlows_d,
        AllowedInFlows = AllowedInFlows_d,
        DeniedInFlows = DeniedInFlows_d,
        DeniedOutFlows = DeniedOutFlows_d,
        RemoteRegion = AzureRegion_s,
        VMRegion = Region_s'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



