%3CLINGO-SUB%20id%3D%22lingo-sub-1510738%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Sentinel%20API%20101%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1510738%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20Sharing%20with%20the%20Community%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fcool_40x40.gif%22%20alt%3D%22%3Acool%3A%22%20title%3D%22%3Acool%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1625769%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Sentinel%20API%20101%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1625769%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everyone%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20questions%20about%20the%20Azure%20Sentinel%20API.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20interested%20in%20using%20some%20sample%20code%20that%20can%20get%20these%20details%20from%20Sentinel%20incidents.%3CBR%20%2F%3EI%20understand%20this%20code%20should%20be%20available%20soon%20on%20Azure%20Sentinel%2FTools%2FSample%20Code%20repo.%3C%2FP%3E%3CP%3EI'd%20like%20to%20be%20an%20early%20tester%2C%20but%20the%20sign-up%20for%20this%20code%20appears%20to%20be%20an%20internal%20email%3A%20%3CA%20href%3D%22mailto%3Aasigtp%40microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Easigtp%40microsoft.com%3C%2FA%3E%3CBR%20%2F%3ECan%20anyone%20help%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECC%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F419776%22%20target%3D%22_blank%22%3E%40Chi_Nguyen%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1438928%22%20slang%3D%22en-US%22%3EAzure%20Sentinel%20API%20101%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1438928%22%20slang%3D%22en-US%22%3E%3C!--%20%5Bif%20!mso%5D%3E%0A%3Cstyle%3E%0Av%5C%3A*%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0Ao%5C%3A*%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0Aw%5C%3A*%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0A.shape%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0A%3C%2Fstyle%3E%0A%3C!%5Bendif%5D--%3E%3C!--%20%5Bif%20gte%20mso%209%5D%3E%3Cxml%3E%0A%20%3Co%3ADocumentProperties%3E%0A%20%20%3Co%3AAuthor%3ESarah%20Young%3C%2Fo%3AAuthor%3E%0A%20%20%3Co%3ATemplate%3ENormal%3C%2Fo%3ATemplate%3E%0A%20%20%3Co%3ALastAuthor%3ESarah%20Young%3C%2Fo%3ALastAuthor%3E%0A%20%20%3Co%3ARevision%3E2%3C%2Fo%3ARevision%3E%0A%20%20%3Co%3ATotalTime%3E168%3C%2Fo%3ATotalTime%3E%0A%20%20%3Co%3ACreated%3E2020-06-03T23%3A46%3A00Z%3C%2Fo%3ACreated%3E%0A%20%20%3Co%3ALastSaved%3E2020-06-03T23%3A46%3A00Z%3C%2Fo%3ALastSaved%3E%0A%20%20%3Co%3APages%3E6%3C%2Fo%3APages%3E%0A%20%20%3Co%3AWords%3E1100%3C%2Fo%3AWords%3E%0A%20%20%3Co%3ACharacters%3E6275%3C%2Fo%3ACharacters%3E%0A%20%20%3Co%3ALines%3E52%3C%2Fo%3ALines%3E%0A%20%20%3Co%3AParagraphs%3E14%3C%2Fo%3AParagraphs%3E%0A%20%20%3Co%3ACharactersWithSpaces%3E7361%3C%2Fo%3ACharactersWithSpaces%3E%0A%20%20%3Co%3AVersion%3E16.00%3C%2Fo%3AVersion%3E%0A%20%3C%2Fo%3ADocumentProperties%3E%0A%20%3Co%3ACustomDocumentProperties%3E%0A%20%20%3Co%3AContentTypeId%20dt%3Adt%3D%22string%22%3E0x0101001375AE3D4E6C9D4BA2C69EC322D353A4%3C%2Fo%3AContentTypeId%3E%0A%20%3C%2Fo%3ACustomDocumentProperties%3E%0A%20%3Co%3AOfficeDocumentSettings%3E%0A%20%20%3Co%3AAllowPNG%2F%3E%0A%20%3C%2Fo%3AOfficeDocumentSettings%3E%0A%3C%2Fxml%3E%3C!%5Bendif%5D--%3E%3C!--%20%5Bif%20gte%20mso%209%5D%3E%3Cxml%3E%0A%20%3Cw%3AWordDocument%3E%0A%20%20%3Cw%3ASpellingState%3EClean%3C%2Fw%3ASpellingState%3E%0A%20%20%3Cw%3AGrammarState%3EClean%3C%2Fw%3AGrammarState%3E%0A%20%20%3Cw%3ATrackMoves%3Efalse%3C%2Fw%3ATrackMoves%3E%0A%20%20%3Cw%3ATrackFormatting%2F%3E%0A%20%20%3Cw%3APunctuationKerning%2F%3E%0A%20%20%3Cw%3AValidateAgainstSchemas%2F%3E%0A%20%20%3Cw%3ASaveIfXMLInvalid%3Efalse%3C%2Fw%3ASaveIfXMLInvalid%3E%0A%20%20%3Cw%3AIgnoreMixedContent%3Efalse%3C%2Fw%3AIgnoreMixedContent%3E%0A%20%20%3Cw%3AAlwaysShowPlaceholderText%3Efalse%3C%2Fw%3AAlwaysShowPlaceholderText%3E%0A%20%20%3Cw%3ADoNotPromoteQF%2F%3E%0A%20%20%3Cw%3ALidThemeOther%3EEN-NZ%3C%2Fw%3ALidThemeOther%3E%0A%20%20%3Cw%3ALidThemeAsian%3EX-NONE%3C%2Fw%3ALidThemeAsian%3E%0A%20%20%3Cw%3ALidThemeComplexscript%3EX-NONE%3C%2Fw%3ALidThemeComplexscript%3E%0A%20%20%3Cw%3ACompatibility%3E%0A%20%20%20%3Cw%3ABreakWrappedTables%2F%3E%0A%20%20%20%3Cw%3ASnapToGridInCell%2F%3E%0A%20%20%20%3Cw%3AWrapTextWithPunct%2F%3E%0A%20%20%20%3Cw%3AUseAsianBreakRules%2F%3E%0A%20%20%20%3Cw%3ADontGrowAutofit%2F%3E%0A%20%20%20%3Cw%3ASplitPgBreakAndParaMark%2F%3E%0A%20%20%20%3Cw%3AEnableOpenTypeKerning%2F%3E%0A%20%20%20%3Cw%3ADontFlipMirrorIndents%2F%3E%0A%20%20%20%3Cw%3AOverrideTableStyleHps%2F%3E%0A%20%20%3C%2Fw%3ACompatibility%3E%0A%20%20%3Cm%3AmathPr%3E%0A%20%20%20%3Cm%3AmathFont%20m%3Aval%3D%22Cambria%20Math%22%2F%3E%0A%20%20%20%3Cm%3AbrkBin%20m%3Aval%3D%22before%22%2F%3E%0A%20%20%20%3Cm%3AbrkBinSub%20m%3Aval%3D%22%26%2345%3B-%22%2F%3E%0A%20%20%20%3Cm%3AsmallFrac%20m%3Aval%3D%22off%22%2F%3E%0A%20%20%20%3Cm%3AdispDef%2F%3E%0A%20%20%20%3Cm%3AlMargin%20m%3Aval%3D%220%22%2F%3E%0A%20%20%20%3Cm%3ArMargin%20m%3Aval%3D%220%22%2F%3E%0A%20%20%20%3Cm%3AdefJc%20m%3Aval%3D%22centerGroup%22%2F%3E%0A%20%20%20%3Cm%3AwrapIndent%20m%3Aval%3D%221440%22%2F%3E%0A%20%20%20%3Cm%3AintLim%20m%3Aval%3D%22subSup%22%2F%3E%0A%20%20%20%3Cm%3AnaryLim%20m%3Aval%3D%22undOvr%22%2F%3E%0A%20%20%3C%2Fm%3AmathPr%3E%3C%2Fw%3AWordDocument%3E%0A%3C%2Fxml%3E%3C!%5Bendif%5D--%3E%3C!--%20%5Bif%20gte%20mso%209%5D%3E%3Cxml%3E%0A%20%3Cw%3ALatentStyles%20DefLockedState%3D%22false%22%20DefUnhideWhenUsed%3D%22false%22%0A%20%20DefSemiHidden%3D%22false%22%20DefQFormat%3D%22false%22%20DefPriority%3D%2299%22%0A%20%20LatentStyleCount%3D%22376%22%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%220%22%20QFormat%3D%22true%22%20Name%3D%22Normal%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20QFormat%3D%22true%22%20Name%3D%22heading%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%207%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%208%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%229%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22heading%209%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%207%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%208%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%209%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%207%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%208%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22toc%209%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Normal%20Indent%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22footnote%20text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22annotation%20text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22header%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22footer%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22index%20heading%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2235%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22caption%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22table%20of%20figures%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22envelope%20address%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22envelope%20return%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22footnote%20reference%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22annotation%20reference%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22line%20number%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22page%20number%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22endnote%20reference%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22endnote%20text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22table%20of%20authorities%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22macro%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22toa%20heading%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Bullet%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Number%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Bullet%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Bullet%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Bullet%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Bullet%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Number%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Number%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Number%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Number%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2210%22%20QFormat%3D%22true%22%20Name%3D%22Title%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Closing%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Signature%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%221%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22Default%20Paragraph%20Font%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%20Indent%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Continue%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Continue%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Continue%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Continue%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22List%20Continue%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Message%20Header%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2211%22%20QFormat%3D%22true%22%20Name%3D%22Subtitle%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Salutation%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Date%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%20First%20Indent%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%20First%20Indent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Note%20Heading%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%20Indent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Body%20Text%20Indent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Block%20Text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Hyperlink%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22FollowedHyperlink%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2222%22%20QFormat%3D%22true%22%20Name%3D%22Strong%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2220%22%20QFormat%3D%22true%22%20Name%3D%22Emphasis%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Document%20Map%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Plain%20Text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22E-mail%20Signature%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Top%20of%20Form%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Bottom%20of%20Form%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Normal%20(Web)%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Acronym%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Address%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Cite%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Code%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Definition%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Keyboard%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Preformatted%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Sample%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Typewriter%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22HTML%20Variable%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Normal%20Table%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22annotation%20subject%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22No%20List%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Outline%20List%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Outline%20List%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Outline%20List%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Simple%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Simple%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Simple%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Classic%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Classic%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Classic%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Classic%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Colorful%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Colorful%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Colorful%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Columns%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Columns%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Columns%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Columns%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Columns%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%207%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Grid%208%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%207%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20List%208%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%203D%20effects%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%203D%20effects%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%203D%20effects%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Contemporary%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Elegant%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Professional%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Subtle%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Subtle%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Web%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Web%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Web%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Balloon%20Text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20Name%3D%22Table%20Grid%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Table%20Theme%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20Name%3D%22Placeholder%20Text%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%221%22%20QFormat%3D%22true%22%20Name%3D%22No%20Spacing%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2260%22%20Name%3D%22Light%20Shading%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2261%22%20Name%3D%22Light%20List%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2262%22%20Name%3D%22Light%20Grid%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2263%22%20Name%3D%22Medium%20Shading%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2264%22%20Name%3D%22Medium%20Shading%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2265%22%20Name%3D%22Medium%20List%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2266%22%20Name%3D%22Medium%20List%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2267%22%20Name%3D%22Medium%20Grid%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2268%22%20Name%3D%22Medium%20Grid%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2269%22%20Name%3D%22Medium%20Grid%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2270%22%20Name%3D%22Dark%20List%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2271%22%20Name%3D%22Colorful%20Shading%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2272%22%20Name%3D%22Colorful%20List%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2273%22%20Name%3D%22Colorful%20Grid%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2260%22%20Name%3D%22Light%20Shading%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2261%22%20Name%3D%22Light%20List%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2262%22%20Name%3D%22Light%20Grid%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2263%22%20Name%3D%22Medium%20Shading%201%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2264%22%20Name%3D%22Medium%20Shading%202%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2265%22%20Name%3D%22Medium%20List%201%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20Name%3D%22Revision%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2234%22%20QFormat%3D%22true%22%0A%20%20%20Name%3D%22List%20Paragraph%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2229%22%20QFormat%3D%22true%22%20Name%3D%22Quote%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2230%22%20QFormat%3D%22true%22%0A%20%20%20Name%3D%22Intense%20Quote%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2266%22%20Name%3D%22Medium%20List%202%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2267%22%20Name%3D%22Medium%20Grid%201%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2268%22%20Name%3D%22Medium%20Grid%202%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2269%22%20Name%3D%22Medium%20Grid%203%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2270%22%20Name%3D%22Dark%20List%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2271%22%20Name%3D%22Colorful%20Shading%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2272%22%20Name%3D%22Colorful%20List%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2273%22%20Name%3D%22Colorful%20Grid%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2260%22%20Name%3D%22Light%20Shading%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2261%22%20Name%3D%22Light%20List%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2262%22%20Name%3D%22Light%20Grid%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2263%22%20Name%3D%22Medium%20Shading%201%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2264%22%20Name%3D%22Medium%20Shading%202%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2265%22%20Name%3D%22Medium%20List%201%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2266%22%20Name%3D%22Medium%20List%202%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2267%22%20Name%3D%22Medium%20Grid%201%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2268%22%20Name%3D%22Medium%20Grid%202%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2269%22%20Name%3D%22Medium%20Grid%203%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2270%22%20Name%3D%22Dark%20List%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2271%22%20Name%3D%22Colorful%20Shading%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2272%22%20Name%3D%22Colorful%20List%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2273%22%20Name%3D%22Colorful%20Grid%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2260%22%20Name%3D%22Light%20Shading%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2261%22%20Name%3D%22Light%20List%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2262%22%20Name%3D%22Light%20Grid%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2263%22%20Name%3D%22Medium%20Shading%201%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2264%22%20Name%3D%22Medium%20Shading%202%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2265%22%20Name%3D%22Medium%20List%201%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2266%22%20Name%3D%22Medium%20List%202%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2267%22%20Name%3D%22Medium%20Grid%201%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2268%22%20Name%3D%22Medium%20Grid%202%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2269%22%20Name%3D%22Medium%20Grid%203%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2270%22%20Name%3D%22Dark%20List%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2271%22%20Name%3D%22Colorful%20Shading%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2272%22%20Name%3D%22Colorful%20List%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2273%22%20Name%3D%22Colorful%20Grid%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2260%22%20Name%3D%22Light%20Shading%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2261%22%20Name%3D%22Light%20List%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2262%22%20Name%3D%22Light%20Grid%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2263%22%20Name%3D%22Medium%20Shading%201%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2264%22%20Name%3D%22Medium%20Shading%202%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2265%22%20Name%3D%22Medium%20List%201%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2266%22%20Name%3D%22Medium%20List%202%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2267%22%20Name%3D%22Medium%20Grid%201%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2268%22%20Name%3D%22Medium%20Grid%202%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2269%22%20Name%3D%22Medium%20Grid%203%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2270%22%20Name%3D%22Dark%20List%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2271%22%20Name%3D%22Colorful%20Shading%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2272%22%20Name%3D%22Colorful%20List%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2273%22%20Name%3D%22Colorful%20Grid%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2260%22%20Name%3D%22Light%20Shading%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2261%22%20Name%3D%22Light%20List%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2262%22%20Name%3D%22Light%20Grid%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2263%22%20Name%3D%22Medium%20Shading%201%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2264%22%20Name%3D%22Medium%20Shading%202%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2265%22%20Name%3D%22Medium%20List%201%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2266%22%20Name%3D%22Medium%20List%202%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2267%22%20Name%3D%22Medium%20Grid%201%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2268%22%20Name%3D%22Medium%20Grid%202%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2269%22%20Name%3D%22Medium%20Grid%203%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2270%22%20Name%3D%22Dark%20List%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2271%22%20Name%3D%22Colorful%20Shading%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2272%22%20Name%3D%22Colorful%20List%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2273%22%20Name%3D%22Colorful%20Grid%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2260%22%20Name%3D%22Light%20Shading%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2261%22%20Name%3D%22Light%20List%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2262%22%20Name%3D%22Light%20Grid%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2263%22%20Name%3D%22Medium%20Shading%201%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2264%22%20Name%3D%22Medium%20Shading%202%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2265%22%20Name%3D%22Medium%20List%201%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2266%22%20Name%3D%22Medium%20List%202%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2267%22%20Name%3D%22Medium%20Grid%201%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2268%22%20Name%3D%22Medium%20Grid%202%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2269%22%20Name%3D%22Medium%20Grid%203%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2270%22%20Name%3D%22Dark%20List%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2271%22%20Name%3D%22Colorful%20Shading%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2272%22%20Name%3D%22Colorful%20List%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2273%22%20Name%3D%22Colorful%20Grid%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2219%22%20QFormat%3D%22true%22%0A%20%20%20Name%3D%22Subtle%20Emphasis%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2221%22%20QFormat%3D%22true%22%0A%20%20%20Name%3D%22Intense%20Emphasis%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2231%22%20QFormat%3D%22true%22%0A%20%20%20Name%3D%22Subtle%20Reference%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2232%22%20QFormat%3D%22true%22%0A%20%20%20Name%3D%22Intense%20Reference%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2233%22%20QFormat%3D%22true%22%20Name%3D%22Book%20Title%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2237%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20Name%3D%22Bibliography%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2239%22%20SemiHidden%3D%22true%22%0A%20%20%20UnhideWhenUsed%3D%22true%22%20QFormat%3D%22true%22%20Name%3D%22TOC%20Heading%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2241%22%20Name%3D%22Plain%20Table%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2242%22%20Name%3D%22Plain%20Table%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2243%22%20Name%3D%22Plain%20Table%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2244%22%20Name%3D%22Plain%20Table%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2245%22%20Name%3D%22Plain%20Table%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2240%22%20Name%3D%22Grid%20Table%20Light%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%20Name%3D%22Grid%20Table%201%20Light%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22Grid%20Table%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22Grid%20Table%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22Grid%20Table%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22Grid%20Table%205%20Dark%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%20Name%3D%22Grid%20Table%206%20Colorful%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%20Name%3D%22Grid%20Table%207%20Colorful%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22Grid%20Table%201%20Light%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22Grid%20Table%202%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22Grid%20Table%203%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22Grid%20Table%204%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22Grid%20Table%205%20Dark%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22Grid%20Table%206%20Colorful%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22Grid%20Table%207%20Colorful%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22Grid%20Table%201%20Light%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22Grid%20Table%202%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22Grid%20Table%203%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22Grid%20Table%204%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22Grid%20Table%205%20Dark%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22Grid%20Table%206%20Colorful%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22Grid%20Table%207%20Colorful%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22Grid%20Table%201%20Light%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22Grid%20Table%202%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22Grid%20Table%203%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22Grid%20Table%204%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22Grid%20Table%205%20Dark%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22Grid%20Table%206%20Colorful%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22Grid%20Table%207%20Colorful%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22Grid%20Table%201%20Light%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22Grid%20Table%202%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22Grid%20Table%203%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22Grid%20Table%204%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22Grid%20Table%205%20Dark%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22Grid%20Table%206%20Colorful%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22Grid%20Table%207%20Colorful%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22Grid%20Table%201%20Light%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22Grid%20Table%202%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22Grid%20Table%203%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22Grid%20Table%204%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22Grid%20Table%205%20Dark%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22Grid%20Table%206%20Colorful%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22Grid%20Table%207%20Colorful%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22Grid%20Table%201%20Light%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22Grid%20Table%202%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22Grid%20Table%203%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22Grid%20Table%204%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22Grid%20Table%205%20Dark%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22Grid%20Table%206%20Colorful%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22Grid%20Table%207%20Colorful%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%20Name%3D%22List%20Table%201%20Light%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22List%20Table%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22List%20Table%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22List%20Table%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22List%20Table%205%20Dark%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%20Name%3D%22List%20Table%206%20Colorful%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%20Name%3D%22List%20Table%207%20Colorful%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22List%20Table%201%20Light%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22List%20Table%202%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22List%20Table%203%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22List%20Table%204%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22List%20Table%205%20Dark%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22List%20Table%206%20Colorful%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22List%20Table%207%20Colorful%20Accent%201%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22List%20Table%201%20Light%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22List%20Table%202%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22List%20Table%203%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22List%20Table%204%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22List%20Table%205%20Dark%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22List%20Table%206%20Colorful%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22List%20Table%207%20Colorful%20Accent%202%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22List%20Table%201%20Light%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22List%20Table%202%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22List%20Table%203%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22List%20Table%204%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22List%20Table%205%20Dark%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22List%20Table%206%20Colorful%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22List%20Table%207%20Colorful%20Accent%203%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22List%20Table%201%20Light%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22List%20Table%202%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22List%20Table%203%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22List%20Table%204%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22List%20Table%205%20Dark%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22List%20Table%206%20Colorful%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22List%20Table%207%20Colorful%20Accent%204%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22List%20Table%201%20Light%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22List%20Table%202%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22List%20Table%203%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22List%20Table%204%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22List%20Table%205%20Dark%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22List%20Table%206%20Colorful%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22List%20Table%207%20Colorful%20Accent%205%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2246%22%0A%20%20%20Name%3D%22List%20Table%201%20Light%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2247%22%20Name%3D%22List%20Table%202%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2248%22%20Name%3D%22List%20Table%203%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2249%22%20Name%3D%22List%20Table%204%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2250%22%20Name%3D%22List%20Table%205%20Dark%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2251%22%0A%20%20%20Name%3D%22List%20Table%206%20Colorful%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20Priority%3D%2252%22%0A%20%20%20Name%3D%22List%20Table%207%20Colorful%20Accent%206%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Mention%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Smart%20Hyperlink%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Hashtag%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Unresolved%20Mention%22%2F%3E%0A%20%20%3Cw%3ALsdException%20Locked%3D%22false%22%20SemiHidden%3D%22true%22%20UnhideWhenUsed%3D%22true%22%0A%20%20%20Name%3D%22Smart%20Link%22%2F%3E%0A%20%3C%2Fw%3ALatentStyles%3E%0A%3C%2Fxml%3E%3C!%5Bendif%5D--%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EAzure%20Sentinel%20has%20several%20different%20APIs%20that%20you%20can%20interact%20with%2C%20and%20we've%20recently%20released%20the%20Sentinel%20Management%20API%20to%20add%20another%20API%20into%20the%20mix.%20This%20topic%20can%20%E2%80%93%20initially%20%E2%80%93%20be%20slightly%20confusing%20as%20we%20have%20APIs%20at%20both%20the%20Sentinel%20and%20Log%20Analytics%20level%20that%20can%20both%20be%20used%20in%20conjunction%20with%20Azure%20Sentinel.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EIn%20this%20article%20we%20are%20going%20to%20explore%20the%20following%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CDIV%20class%3D%22WordSection1%22%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EWhat%20APIs%20Sentinel%20has%20available%3C%2FLI%3E%0A%3CLI%3EHow%20to%20authenticate%20to%20each%20API%3C%2FLI%3E%0A%3CLI%3EWhat%20you%20can%20use%20each%20API%20for%3C%2FLI%3E%0A%3CLI%3ETools%20that%20you%20can%20use%20with%20the%20APIs%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20color%3D%22%23000000%22%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EWe%20also%20have%20an%20accompanying%20bitesize%20video%20on%20the%20Microsoft%20Security%20Channel%20for%20this%20topic%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DgQDBkc-K-Y4%26amp%3Bfeature%3Dyoutu.be%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId--1323838318%22%20id%3D%22toc-hId--1323838318%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId-1163674515%22%20id%3D%22toc-hId-1163674515%22%3E%3CSTRONG%3EOverview%20of%20Sentinel%20APIs%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3EWe%20can%20categorize%20Azure%20Sentinel%20APIs%20as%20follows%3A%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EAzure%20Sentinel%20Management%20API%3C%2FLI%3E%0A%3CLI%3EMicrosoft%20Graph%20Security%20API%3C%2FLI%3E%0A%3CLI%3ELog%20Analytics%20API%3C%2FLI%3E%0A%3CLI%3EHTTP%20Data%20Collector%20API%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20class%3D%22MsoNormal%22%3EThe%20below%20diagram%20summarizes%20where%20the%20different%20APIs%20within%20Sentinel%20sit%20architecturally%20and%20what%20calls%20can%20be%20made%20to%20them%3A%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22API%20diag%203.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F203979iEC1BB51A632A7839%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22API%20diag%203.PNG%22%20alt%3D%22API%20diag%203.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId--643779948%22%20id%3D%22toc-hId--643779948%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId-1843732885%22%20id%3D%22toc-hId-1843732885%22%3E%3CSTRONG%3EAzure%20Sentinel%20Management%20API%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3EThe%20Sentinel%20Management%20API%20allows%20you%20to%20manage%20aspects%20of%20Azure%20Sentinel%20specifically%20outside%20of%20Log%20Analytics%20e.g.%20incidents%20and%20analytic%20rules.%20The%20GitHub%20repo%20link%20to%20our%20API%20branches%20can%20be%20found%26nbsp%3B%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2Fazure-rest-api-specs%2Ftree%2Fmaster%2Fspecification%2Fsecurityinsights%2Fresource-manager%2FMicrosoft.SecurityInsights%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E%2C%20and%20the%20MS%20Docs%20article%20about%20the%20Sentinel%20Management%20API%20can%20be%20found%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Frest%2Fapi%2Fsecurityinsights%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3ESentinel%20Management%20API%20uses*%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EGET%20%2F%20CREATE%20%2F%20DELETE%20incidents%3C%2FLI%3E%0A%3CLI%3EGET%20%2F%20CREATE%20%2F%20DELETE%20analytic%20rules%3C%2FLI%3E%0A%3CLI%3EGET%20%2F%20DELETE%20data%20connectors%3C%2FLI%3E%0A%3CLI%3EPOST%20%2F%20UPDATE%20bookmarks%3C%2FLI%3E%0A%3CLI%3EGET%20entity%20info%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CEM%3E*Please%20refer%20to%20the%20GitHub%20repo%20for%20a%20comprehensive%20list%20of%20API%20uses.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EExample%20API%20call%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-html%22%3E%3CCODE%3EGET%20https%3A%2F%2Fmanagement.azure.com%2Fsubscriptions%2F%7BSubscriptionID%7D%2FresourceGroups%2F%7BResourceGroup%7D%2Fproviders%2FMicrosoft.OperationalInsights%2Fworkspaces%2F%7BWorkspaceName%7D%2Fproviders%2FMicrosoft.SecurityInsights%2Fincidents%2F%7BIncidentID%7D%3Fapi-version%3D2020-01-01%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3ESentinel%20Management%20API%20authentication%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Fquickstart-register-app%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3ERegister%20an%20application%20in%20Azure%20AD%3C%2FA%3E.%20To%20authenticate%20to%20the%20Sentinel%20Management%20API%2C%20grant%20Sentinel%20Contributor%20%2F%20Azure%20Sentinel%20Responder%20%2F%20Azure%20Sentinel%20Reader%E2%80%9D%20permissions*%20to%20the%20application%20created%20in%20the%20IAM%20setting%20of%20the%20Resource%20Group%20where%20Azure%20Sentinel%20has%20been%20built%3A%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CFONT%20color%3D%22%23FF0000%22%3E%3CI%3E*Adhering%20to%20the%20principle%20of%20least%20privilege%2C%20always%20grant%20the%20lowest%20possible%20permissions%20required%20to%20your%20API.%3C%2FI%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22goodcapture.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196363iA19A80B1B0B9DDB3%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22goodcapture.PNG%22%20alt%3D%22goodcapture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ETools%20to%20use%20with%20this%20API%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThe%20most%20common%20use%20for%20the%20API%20is%20to%20automate%20the%20deployment%20and%20update%20of%20Analytics%20alert%20rules%20and%20hunting%20queries.%20Wortell%20has%20created%20a%20PowerShell%20tool%20called%20%3CA%20href%3D%22https%3A%2F%2Fmedium.com%2Fwortell%2Fazure-sentinel-automating-your-use-cases-with-powershell-and-the-azsentinel-module-380606e601f5%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3EAzSentinel%3C%2FA%3E%20and%20this%20can%20be%20used%20to%20export%20and%20import%20all%20rules%20from%20a%20workspace.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F66621%22%20target%3D%22_blank%22%3E%40Javier%20Soriano%3C%2FA%3E%26nbsp%3Band%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F70186%22%20target%3D%22_blank%22%3E%40Philippe%20Zenhaeusern%3C%2FA%3E%26nbsp%3Bhave%20implemented%20a%20CI%2FCD%20flow%20using%20GitHub%2C%20Azure%20DevOps%2C%20and%20the%20Sentinel%20automation%20capabilities.%20It%20enables%20you%20to%20manage%20rules%2C%20queries%2C%20playbooks%2C%20workbooks%2C%20and%20more%20on%20GitHub%20and%20have%20them%20continuously%20deployed%20to%20your%20Sentinel%20workspace%20which%20you%20can%20read%20about%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fdeploying-and-managing-azure-sentinel-as-code%2Fba-p%2F1131928%22%20target%3D%22_self%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId-36278422%22%20id%3D%22toc-hId-36278422%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId--1771176041%22%20id%3D%22toc-hId--1771176041%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId-716336792%22%20id%3D%22toc-hId-716336792%22%3E%3CSTRONG%3EMicrosoft%20Graph%20Security%20API%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20data-unlink%3D%22true%22%3EYou%20may%20be%20familiar%20with%20the%20Graph%20Security%20API%20from%20using%20other%20Microsoft%20security%20products.%20%3CSPAN%3EThe%20Microsoft%20Graph%20Security%20API%20provides%20a%20unified%20interface%20and%20schema%20to%20integrate%20with%20security%20solutions%20from%20Microsoft%20and%20ecosystem%20partners.%20The%20Microsoft%20Graph%20Security%20API%20federates%20queries%20to%20all%20onboarded%20security%20providers%20and%20aggregates%20responses.%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F40452%22%20target%3D%22_blank%22%3E%40Stefan%20Simon%3C%2FA%3E%20blogged%20about%20ingesting%20M365%20alerts%20into%20Sentinel%20on%20MS%20Tech%20Community%2C%20the%20link%20to%20this%20article%20is%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fingesting-office-365-alerts-with-graph-security-api%2Fba-p%2F984888%22%20target%3D%22_self%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20data-unlink%3D%22true%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EMicrosoft%20Graph%20Security%20API%20uses%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EGET%20security%20alerts.%3C%2FLI%3E%0A%3CLI%3EPOST%20security%20alerts.%3C%2FLI%3E%0A%3CLI%3EIngest%20TI%20into%20Sentinel.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20class%3D%22MsoNormal%22%3EMore%20details%20on%20calling%20the%20Graph%20Security%20API%20can%20be%20found%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Fresources%2Fsecurity-api-overview%3Fview%3Dgraph-rest-1.0%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3EExample%20API%20call%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-html%22%3E%3CCODE%3EGET%20https%3A%2F%2Fgraph.microsoft.com%2Fv1.0%2Fsecurity%2Falerts%3F%24filter%3DvendorInformation%2Fprovider%20eq%20%0A%E2%80%98Azure%20Sentinel%E2%80%99%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EMicrosoft%20Graph%20Security%20authentication%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ETo%20authenticate%20to%20the%20Graph%20Security%20API%2C%20you%20need%20to%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Fquickstart-register-app%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Eregister%20an%20app%20in%20Azure%20AD%3C%2FA%3E%20and%20grant%20the%20app%20permissions%20to%20Microsoft%20Graph%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ESecurityEvents.Read.All%20or%3B%3C%2FLI%3E%0A%3CLI%3ESecurityEvents.ReadWrite.All*%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CFONT%20color%3D%22%23FF0000%22%3E%3CI%3E*Adhering%20to%20the%20principle%20of%20least%20privilege%2C%20always%20grant%20the%20lowest%20possible%20permissions%20required%20to%20your%20API.%3C%2FI%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture2.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196352i03320A972FA4E772%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture2.PNG%22%20alt%3D%22Capture2.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3EMore%20details%20on%20authenticating%20to%20the%20Graph%20Security%20API%20can%20be%20found%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fsecurity-authorization%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ETools%20to%20use%20with%20this%20API%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Fresources%2Fsecurity-api-overview%3Fview%3Dgraph-rest-1.0%23alerts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Fresources%2Fsecurity-api-overview%3Fview%3Dgraph-rest-1.0%23alerts%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsentinel%2Fconnect-threat-intelligence%23connect-azure-sentinel-to-your-threat-intelligence-platform%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsentinel%2Fconnect-threat-intelligence%23connect-azure-sentinel-to-your-threat-intelligence-platform%3C%2FA%3E%3C%2FP%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId--1091117671%22%20id%3D%22toc-hId--1091117671%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId-1396395162%22%20id%3D%22toc-hId-1396395162%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId--411059301%22%20id%3D%22toc-hId--411059301%22%3E%3CSTRONG%3ELog%20Analytics%20API%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3EThe%20Log%20Analytics%20API%20allows%20you%20to%20query%20a%20Log%20Analytics%20workspace%2C%20including%20workspaces%20that%20have%20Sentinel%20set%20up%20on%20them.%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F512377%22%20target%3D%22_blank%22%3E%40rinure%3C%2FA%3E%26nbsp%3Bblogged%20on%20this%20topic%20previously%20in%20on%20MS%20Tech%20Community%20and%20went%20into%20great%20detail%2C%20you%20can%20read%20his%20blog%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Faccess-azure-sentinel-log-analytics-via-api-part-1%2Fba-p%2F1248377%22%20target%3D%22_self%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ELog%20Analytics%20API%20uses%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EGET%20%2F%20POST%20data%20stored%20in%20a%20Log%20Analytics%20workspace*%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CEM%3E*sometimes%20POST%20requests%20will%20need%20to%20be%20used%20to%20read%20data%20(not%20to%20send%20data%20to%20the%20LA%20workspace).%26nbsp%3B%3C%2FEM%3E%3CEM%3EMore%20details%20on%20the%20API%20request%20format%20can%20be%20found%20%3CA%20href%3D%22https%3A%2F%2Fdev.loganalytics.io%2Fdocumentation%2FUsing-the-API%2FRequestFormat%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%26nbsp%3B%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3EExample%20API%20call%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-html%22%3E%3CCODE%3EGET%20https%3A%2F%2Fapi.loganalytics.io%2Fv1%2Fworkspaces%2F%7Bworkspace-id%7D%2Fquery%3Fquery%3DAzureActivity%2520%7C%2520summarize%2520count()%2520by%2520Category%0A%0AAuthorization%3A%20Bearer%20%3CACCESS%20token%3D%22%22%3E%3C%2FACCESS%3E%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3ELog%20Analytics%20API%20authentication%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3ETo%20authenticate%20to%20the%20Log%20Analytics%20API%2C%20you%20need%20to%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Fquickstart-register-app%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Eregister%20an%20app%20in%20Azure%20AD%3C%2FA%3E%20and%20grant%20the%20app%20%3CSPAN%20class%3D%22SpellE%22%3EData.Read%3C%2FSPAN%3E%20permissions%20to%20the%20Log%20Analytics%20API%3A%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture3.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196347i3C38C06F989E7235%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture3.PNG%22%20alt%3D%22Capture3.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3ENext%2C%20go%20to%20the%20IAM%20section%20of%20your%20Sentinel%20Log%20Analytics%20workspace%20and%20grant%20%22Log%20Analytics%20Reader%22%20or%20%E2%80%9CLog%20Analytics%20Contributor%E2%80%9D%20permission%20to%20the%20application*%3A%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CFONT%20color%3D%22%23FF0000%22%3E%3CI%3E*Adhering%20to%20the%20principle%20of%20least%20privilege%2C%20always%20grant%20the%20lowest%20possible%20permissions%20required%20to%20your%20API.%3C%2FI%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture4.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196348iC383B14286F2DB1D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture4.PNG%22%20alt%3D%22Capture4.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ELimitations%20of%20the%20Log%20Analytics%20API%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EAs%20well%20as%20call%20rate%20limits%20and%20daily%20quota%20caps%2C%20there%20are%20also%20limits%20on%20queries%20themselves%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EQueries%20cannot%20return%20more%20than%20500%2C000%20rows%3C%2FLI%3E%0A%3CLI%3EQueries%20cannot%20return%20more%20than%2064%2C000%2C000%20bytes%20(~61%20MiB%20total%20data)%3C%2FLI%3E%0A%3CLI%3EQueries%20cannot%20run%20longer%20than%2010%20minutes%20by%20default.%20See%20this%20for%20details.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20class%3D%22MsoNormal%22%3EFor%20up%20to%20date%20limitations%20of%20the%20Log%20Analytics%20API%2C%20please%20see%20%3CA%20href%3D%22https%3A%2F%2Fdev.loganalytics.io%2Fdocumentation%2FUsing-the-API%2FLimits%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ETools%20to%20use%20with%20this%20API%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThere%20are%20some%20tools%20that%20already%20use%20the%20API%20and%20can%20make%20life%20simpler%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fwww.powershellgallery.com%2Fpackages%2FInvoke-AzOperationalInsightsQueryExport%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3EPowerShell%26nbsp%3Bscript%3C%2FA%3E%26nbsp%3B-%20now%20includes%20CSV%20export%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Faz.operationalinsights%2Fget-azoperationalinsightssearchresult%3Fview%3Dazps-3.7.0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EPowerShell%20cmdlet%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcli%2Fazure%2Fext%2Flog-analytics%2Fmonitor%2Flog-analytics%3Fview%3Dazure-cli-latest%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EAzure%20CLI%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fconnectors%2Fazuremonitorlogs%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3ELogic%20Apps%20Azure%20Monitor%20logs%20connector%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId--544744025%22%20id%3D%22toc-hId--544744025%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId-1942768808%22%20id%3D%22toc-hId-1942768808%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20class%3D%22MsoNormal%22%20id%3D%22toc-hId-135314345%22%20id%3D%22toc-hId-135314345%22%3E%3CSTRONG%3EHTTP%20Data%20Collector%20API%20%3C%2FSTRONG%3E%3CSTRONG%3E(Public%20Preview)%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3EYou%20can%20use%20the%20HTTP%20Data%20Collector%20API%20to%20send%20log%20data%20to%20a%20Log%20Analytics%20from%20any%20client%20that%20can%20call%20a%20REST%20API.%20This%20might%20be%20a%20runbook%20in%20Azure%20Automation%20that%20collects%20management%20data%20from%20Azure%20or%20another%20cloud%2C%20or%20it%20might%20be%20an%20alternate%20management%20system%20that%20uses%20Azure%20Monitor%20to%20consolidate%20and%20%3CSPAN%20class%3D%22SpellE%22%3Eanalyze%3C%2FSPAN%3E%20log%20data.%20More%20details%20about%20this%20connector%20can%20be%20found%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fplatform%2Fdata-collector-api%23data-limits%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22httspdatacollector.PNG%22%20style%3D%22width%3A%20799px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F196346iF052EC014F498CB1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22httspdatacollector.PNG%22%20alt%3D%22httspdatacollector.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EHTTP%20Data%20Collector%20API%20uses%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EPOST%20data%20to%20a%20Log%20Analytics%20workspace%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3EExample%20API%20call%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3EWe've%20put%20together%20a%20simple%3CSPAN%3E%26nbsp%3BC%23%20console%20application%20to%20demonstrate%20how%20you%20can%20leverage%20the%26nbsp%3B%20HTTP%20Data%20Collector%20API%20to%20post%20data%20to%26nbsp%3B%20Log%20Analytics%20custom%20logs%2C%20click%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Sentinel%2Ftree%2Fmaster%2FTools%2FSample%2520Code%2FHttpDataCollectorAPI%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E%20for%20details.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3EHTTP%20Data%20Collector%20API%20authentication%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3EAny%20request%20to%20the%20Azure%20Monitor%20HTTP%20Data%20Collector%20API%20must%20include%20an%20authorization%20header.%20To%20authenticate%20a%20request%2C%20you%20must%20sign%20the%20request%20with%20either%20the%20primary%20or%20the%20secondary%20key%20for%20the%20workspace%20that%20is%20making%20the%20request.%20Then%2C%20pass%20that%20signature%20as%20part%20of%20the%20request.%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-html%22%3E%3CCODE%3EAuthorization%3A%20SharedKey%20%3CWORKSPACEID%3E%3A%3CSIGNATURE%3E%3C%2FSIGNATURE%3E%3C%2FWORKSPACEID%3E%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CI%3E%26nbsp%3B%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSTRONG%3EHTTP%20Data%20Collector%20API%20limitations%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThere%20are%20some%20constraints%20around%20the%20data%20posted%20to%20the%20HTTP%20Data%20Collector%20API.%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EMaximum%20of%2030%20MB%20per%20post%20to%20Azure%20Monitor%20Data%20Collector%20API.%20This%20is%20a%20size%20limit%20for%20a%20single%20post.%20If%20the%20data%20from%20a%20single%20post%20that%20exceeds%2030%20MB%2C%20you%20should%20split%20the%20data%20up%20to%20smaller%20sized%20chunks%20and%20send%20them%20concurrently.%3C%2FLI%3E%0A%3CLI%3EMaximum%20of%2032%20KB%20limit%20for%20field%20values.%20If%20the%20field%20value%20is%20greater%20than%2032%20KB%2C%20the%20data%20will%20be%20truncated.%3C%2FLI%3E%0A%3CLI%3ERecommended%20maximum%20number%20of%20fields%20for%20a%20given%20type%20is%2050.%20This%20is%20a%20practical%20limit%20from%20a%20usability%20and%20search%20experience%20perspective.%3C%2FLI%3E%0A%3CLI%3EA%20table%20in%20a%20Log%20Analytics%20workspace%20only%20supports%20up%20to%20500%20columns%20(referred%20to%20as%20a%20field%20in%20this%20article).%3C%2FLI%3E%0A%3CLI%3EThe%20maximum%20number%20of%20characters%20for%20the%20column%20name%20is%20500.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20class%3D%22MsoNormal%22%3EFor%20up%20to%20date%20limitations%20of%20the%20HTTP%20Data%20Collector%20API%2C%20please%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fplatform%2Fdata-collector-api%23data-limits%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ETools%20to%20use%20with%20this%20API%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThe%20API%20and%20the%20different%20ways%20to%20use%20it%20are%20discussed%20in%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fazure-sentinel-creating-custom-connectors%2Fba-p%2F864060%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Ecustom%20connectors%20blog%20post%3C%2FA%3E.%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1672140118%22%20id%3D%22toc-hId--1672140118%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20id%3D%22toc-hId-815372715%22%20id%3D%22toc-hId-815372715%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20id%3D%22toc-hId--992081748%22%20id%3D%22toc-hId--992081748%22%3E%3CSTRONG%3ESummary%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20data-unlink%3D%22true%22%3EYou%20have%20many%20options%20to%20interface%20with%20Azure%20Sentinel%20using%20APIs%2C%20and%20what%20method%20you%20choose%20will%20depend%20on%20what%20you're%20ultimately%20trying%20to%20achieve%20and%20your%20organization's%20use%20cases.%20This%20blog%20post%20was%20intended%20to%20serve%20as%20a%20brief%20introduction%20to%20APIs%20in%20Sentinel.%20If%20you'd%20like%20to%20dive%20deeper%20into%20this%20topic%2C%20we'd%20encourage%20you%20to%20watch%26nbsp%3Bour%20presentation%20on%20%3CSTRONG%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DCu4dc88GH1k%26amp%3Bfeature%3Dyoutu.be%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3EExtending%20and%20Integrating%20Sentinel%20(APIs)%3C%2FA%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSTRONG%3Efrom%20our%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FSecurityWebinars%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3ESecurity%20Community%20webinar%20series%3C%2FA%3E%20and%20to%20check%20out%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F293879%22%20target%3D%22_blank%22%3E%40Ofer_Shezaf%3C%2FA%3E's%20accompanying%20tech%20community%20post%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fextending-azure-sentinel-apis-integration-and-management%2Fba-p%2F1116885%22%20target%3D%22_self%22%3Ehere%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%0A%3CH5%20id%3D%22toc-hId-1882679242%22%20id%3D%22toc-hId-1882679242%22%3E%26nbsp%3B%3C%2FH5%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CI%3EThe%20diagrams%20in%20this%20article%20were%20drawn%20by%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F118945%22%20target%3D%22_blank%22%3E%40Takeshi%20Muto%3C%2FA%3E.%20Credit%20to%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F232659%22%20target%3D%22_blank%22%3E%40Chi%20Nguyen%3C%2FA%3E%26nbsp%3Bfor%20the%20sample%20HTTP%20Data%20Collector%20API%20in%20our%20GitHub%20repo.%20Final%20thanks%20to%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F293879%22%20target%3D%22_blank%22%3E%40Ofer_Shezaf%3C%2FA%3E%26nbsp%3Bfor%20reviewing%20the%20content%3C%2FI%3E%3C%2FP%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1438928%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20Sentinel%20Management%20API%20just%20went%20GA!%20In%20this%20blog%20post%20we%20give%20you%20the%20101%20on%20the%20different%20APIs%20you%20can%20use%20to%20interact%20with%20Azure%20Sentinel.%20We'll%20look%20at%20how%20you%20can%20use%20them%2C%20when%20you%20should%20use%20them%2C%20what%20tools%20you%20can%20use%20to%20interact%20with%20them%20and%20how%20to%20authenticate%20to%20them.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22API%20diag%203.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F204209i8A6BD41AB9E5D6CB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22API%20diag%203.PNG%22%20alt%3D%22API%20diag%203.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1438928%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Sentinel%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDetection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHunting%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EInvestigation%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWhat's%20New%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft

Azure Sentinel has several different APIs that you can interact with, and we've recently released the Sentinel Management API to add another API into the mix. This topic can – initially – be slightly confusing as we have APIs at both the Sentinel and Log Analytics level that can both be used in conjunction with Azure Sentinel. In this article we are going to explore the following:

 

  • What APIs Sentinel has available
  • How to authenticate to each API
  • What you can use each API for
  • Tools that you can use with the APIs

 

We also have an accompanying bitesize video on the Microsoft Security Channel for this topic here.

 

Overview of Sentinel APIs

 

We can categorize Azure Sentinel APIs as follows:

 

  • Azure Sentinel Management API
  • Microsoft Graph Security API
  • Log Analytics API
  • HTTP Data Collector API

The below diagram summarizes where the different APIs within Sentinel sit architecturally and what calls can be made to them:

 

API diag 3.PNG

 

Azure Sentinel Management API

 

The Sentinel Management API allows you to manage aspects of Azure Sentinel specifically outside of Log Analytics e.g. incidents and analytic rules. The GitHub repo link to our API branches can be found  here, and the MS Docs article about the Sentinel Management API can be found here.

 

Sentinel Management API uses*

  • GET / CREATE / DELETE incidents
  • GET / CREATE / DELETE analytic rules
  • GET / DELETE data connectors
  • POST / UPDATE bookmarks
  • GET entity info

*Please refer to the GitHub repo for a comprehensive list of API uses.

 

Example API call

GET https://management.azure.com/subscriptions/{SubscriptionID}/resourceGroups/{ResourceGroup}/providers/Microsoft.OperationalInsights/workspaces/{WorkspaceName}/providers/Microsoft.SecurityInsights/incidents/{IncidentID}?api-version=2020-01-01

 

Sentinel Management API authentication

Register an application in Azure AD. To authenticate to the Sentinel Management API, grant Sentinel Contributor / Azure Sentinel Responder / Azure Sentinel Reader” permissions* to the application created in the IAM setting of the Resource Group where Azure Sentinel has been built:

*Adhering to the principle of least privilege, always grant the lowest possible permissions required to your API.

goodcapture.PNG

Tools to use with this API

The most common use for the API is to automate the deployment and update of Analytics alert rules and hunting queries. Wortell has created a PowerShell tool called AzSentinel and this can be used to export and import all rules from a workspace. @Javier Soriano and @Philippe Zenhaeusern have implemented a CI/CD flow using GitHub, Azure DevOps, and the Sentinel automation capabilities. It enables you to manage rules, queries, playbooks, workbooks, and more on GitHub and have them continuously deployed to your Sentinel workspace which you can read about here.

 

 

Microsoft Graph Security API

 

You may be familiar with the Graph Security API from using other Microsoft security products. The Microsoft Graph Security API provides a unified interface and schema to integrate with security solutions from Microsoft and ecosystem partners. The Microsoft Graph Security API federates queries to all onboarded security providers and aggregates responses. @Stefan Simon blogged about ingesting M365 alerts into Sentinel on MS Tech Community, the link to this article is here.

 

Microsoft Graph Security API uses

  • GET security alerts.
  • POST security alerts.
  • Ingest TI into Sentinel.

More details on calling the Graph Security API can be found here.

 

Example API call

GET https://graph.microsoft.com/v1.0/security/alerts?$filter=vendorInformation/provider eq 
‘Azure Sentinel’

 

Microsoft Graph Security authentication

To authenticate to the Graph Security API, you need to register an app in Azure AD and grant the app permissions to Microsoft Graph:

  • SecurityEvents.Read.All or;
  • SecurityEvents.ReadWrite.All*

*Adhering to the principle of least privilege, always grant the lowest possible permissions required to your API.

 

Capture2.PNG

More details on authenticating to the Graph Security API can be found here.

 

Tools to use with this API

https://docs.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0#alert...

https://docs.microsoft.com/en-us/azure/sentinel/connect-threat-intelligence#connect-azure-sentinel-t...

 

 

Log Analytics API

 

The Log Analytics API allows you to query a Log Analytics workspace, including workspaces that have Sentinel set up on them. @rinure blogged on this topic previously in on MS Tech Community and went into great detail, you can read his blog here.

 

Log Analytics API uses

  • GET / POST data stored in a Log Analytics workspace*

*sometimes POST requests will need to be used to read data (not to send data to the LA workspace). More details on the API request format can be found here

 

 

Example API call

GET https://api.loganalytics.io/v1/workspaces/{workspace-id}/query?query=AzureActivity%20|%20summarize%20count()%20by%20Category

Authorization: Bearer <access token>

 

Log Analytics API authentication

To authenticate to the Log Analytics API, you need to register an app in Azure AD and grant the app Data.Read permissions to the Log Analytics API:

Capture3.PNG

Next, go to the IAM section of your Sentinel Log Analytics workspace and grant "Log Analytics Reader" or “Log Analytics Contributor” permission to the application*:

*Adhering to the principle of least privilege, always grant the lowest possible permissions required to your API.

 

Capture4.PNG

 

Limitations of the Log Analytics API

As well as call rate limits and daily quota caps, there are also limits on queries themselves:

  • Queries cannot return more than 500,000 rows
  • Queries cannot return more than 64,000,000 bytes (~61 MiB total data)
  • Queries cannot run longer than 10 minutes by default. See this for details.

For up to date limitations of the Log Analytics API, please see here.

 

Tools to use with this API

There are some tools that already use the API and can make life simpler:

 

 

HTTP Data Collector API (Public Preview)

 

You can use the HTTP Data Collector API to send log data to a Log Analytics from any client that can call a REST API. This might be a runbook in Azure Automation that collects management data from Azure or another cloud, or it might be an alternate management system that uses Azure Monitor to consolidate and analyze log data. More details about this connector can be found here

httspdatacollector.PNG

 

HTTP Data Collector API uses

  • POST data to a Log Analytics workspace

 

Example API call

We've put together a simple C# console application to demonstrate how you can leverage the  HTTP Data Collector API to post data to  Log Analytics custom logs, click here for details.

 

HTTP Data Collector API authentication

Any request to the Azure Monitor HTTP Data Collector API must include an authorization header. To authenticate a request, you must sign the request with either the primary or the secondary key for the workspace that is making the request. Then, pass that signature as part of the request.

Authorization: SharedKey <WorkspaceID>:<Signature>

 

HTTP Data Collector API limitations

There are some constraints around the data posted to the HTTP Data Collector API.

  • Maximum of 30 MB per post to Azure Monitor Data Collector API. This is a size limit for a single post. If the data from a single post that exceeds 30 MB, you should split the data up to smaller sized chunks and send them concurrently.
  • Maximum of 32 KB limit for field values. If the field value is greater than 32 KB, the data will be truncated.
  • Recommended maximum number of fields for a given type is 50. This is a practical limit from a usability and search experience perspective.
  • A table in a Log Analytics workspace only supports up to 500 columns (referred to as a field in this article).
  • The maximum number of characters for the column name is 500.

For up to date limitations of the HTTP Data Collector API, please see here.

 

Tools to use with this API

The API and the different ways to use it are discussed in the custom connectors blog post.

 

 

Summary

 

You have many options to interface with Azure Sentinel using APIs, and what method you choose will depend on what you're ultimately trying to achieve and your organization's use cases. This blog post was intended to serve as a brief introduction to APIs in Sentinel. If you'd like to dive deeper into this topic, we'd encourage you to watch our presentation on Extending and Integrating Sentinel (APIs) from our Security Community webinar series and to check out @Ofer_Shezaf's accompanying tech community post here

 

 

The diagrams in this article were drawn by @Takeshi Muto. Credit to @Chi Nguyen for the sample HTTP Data Collector API in our GitHub repo. Final thanks to @Ofer_Shezaf for reviewing the content

2 Comments

Thank you for Sharing with the Community :cool:

Occasional Contributor

Hi everyone,

 

I have questions about the Azure Sentinel API.

 

I'm interested in using some sample code that can get these details from Sentinel incidents.
I understand this code should be available soon on Azure Sentinel/Tools/Sample Code repo.

I'd like to be an early tester, but the sign-up for this code appears to be an internal email: asigtp@microsoft.com
Can anyone help?

 

CC: @Chi_Nguyen