msticpy/data/queries/kql_sent_winevent_logon.yaml [155:173]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        direct_func_entities:
          - Account
    args:
      query: '
        {table}
        {event_filter}
        {query_project}
        | where {subscription_filter}
        | where Account has "{account_name}"
        | where TimeGenerated >= datetime({start})
        | where TimeGenerated <= datetime({end})
        {add_query_items}'
    parameters:
      account_name:
        description: The account name to find
        type: str
      event_filter:
        description: Event ID filter
        type: str
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



msticpy/data/queries/kql_sent_winevent_logon.yaml [180:198]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        direct_func_entities:
          - Account
    args:
      query: '
        {table}
        {event_filter}
        {query_project}
        | where {subscription_filter}
        | where Account has "{account_name}"
        | where TimeGenerated >= datetime({start})
        | where TimeGenerated <= datetime({end})
        {add_query_items}'
    parameters:
      account_name:
        description: The account name to find
        type: str
      event_filter:
        description: Event ID filter
        type: str
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



