From 5b9b4359d81ea6a628f2f4064ed2fc3abfb1be4e Mon Sep 17 00:00:00 2001
From: v-rusraut <v-rusraut@microsoft.com>
Date: Fri, 3 May 2024 14:38:59 +0530
Subject: [PATCH] Repackage - Vectra XDR , Dataminr Pulse

---
 .../Analytic Rules/DetectXDR_detections.yaml  |   4 +-
 .../Vectra XDR/Data/Solution_VectraXDR.json   |   2 +-
 Solutions/Vectra XDR/Package/3.1.1.zip        | Bin 0 -> 22254 bytes
 .../Package/createUiDefinition.json           |   2 +-
 .../Vectra XDR/Package/mainTemplate.json      | 118 +++++++++---------
 Solutions/Vectra XDR/ReleaseNotes.md          |   3 +-
 6 files changed, 65 insertions(+), 64 deletions(-)
 create mode 100644 Solutions/Vectra XDR/Package/3.1.1.zip

diff --git a/Solutions/Vectra XDR/Analytic Rules/DetectXDR_detections.yaml b/Solutions/Vectra XDR/Analytic Rules/DetectXDR_detections.yaml
index 37b6a1a3f0..3bc0afd0d2 100644
--- a/Solutions/Vectra XDR/Analytic Rules/DetectXDR_detections.yaml	
+++ b/Solutions/Vectra XDR/Analytic Rules/DetectXDR_detections.yaml	
@@ -1,6 +1,6 @@
 id: 065c0a50-3080-4f9a-acca-1fe6fbf63205
 name: Vectra Detection Alerts
-version: 1.0.0
+version: 1.0.1
 kind: Scheduled
 description: This analytic rule is looking for new attacker behaviors observed by the Vectra Platform. The intent is to create entries in the SecurityAlert table for every new detection attached to an entity monitored by the Vectra Platform
 status: Available
@@ -34,7 +34,7 @@ incidentConfiguration:
   groupingConfiguration:
     enabled: false
     reopenClosedIncident: false
-    lookbackDuration: 5h
+    lookbackDuration: PT5H
     matchingMethod: AllEntities
     groupByEntities: []
     groupByAlertDetails: []
diff --git a/Solutions/Vectra XDR/Data/Solution_VectraXDR.json b/Solutions/Vectra XDR/Data/Solution_VectraXDR.json
index b11e911d05..899bb1ca2e 100644
--- a/Solutions/Vectra XDR/Data/Solution_VectraXDR.json	
+++ b/Solutions/Vectra XDR/Data/Solution_VectraXDR.json	
@@ -21,7 +21,7 @@
         "Workbooks/VectraXDR.json"
     ],
     "BasePath": "C:\\Users\\xxx\\Documents\\GitHub\\Azure-Sentinel\\Solutions\\Vectra XDR",
-    "Version": "3.1.0",
+    "Version": "3.1.1",
     "Metadata": "SolutionMetadata.json",
     "TemplateSpec": true,
     "Is1PConnector": false
diff --git a/Solutions/Vectra XDR/Package/3.1.1.zip b/Solutions/Vectra XDR/Package/3.1.1.zip
new file mode 100644
index 0000000000000000000000000000000000000000..70254570821c3eb66e9b580b8e4713c6d408f314
GIT binary patch
literal 22254
zcmV)6K*+yPO9KQH000080OWI{Sob&x3%d#c08b?V02crN0Aq4xVRU6xX+&jaX>MtB
zX>V>WYIARH-CBKb+qfD3f55&2;cbW=*m4@+upwCQ;3eH%fMgAttlf|V1ufAQ7fIBS
zlwG$Au+OrOwokI(L+aI5nx?(p4J!_<MN!ZD%kLrY!>@nE*x<J&j77=^M{E#Vo13HQ
z)UO07&-hZLBC`R1UuY48DlOlc=|S);IGp5KtfW{^kG0@d{PpxiEMz9FR9SFdBv!so
zgMS#6{bn$Bykee3iO|IBT!va1wXng=(QZ*FH?M>?AVixx%*xj}*E|&#o3P^pEnzWK
z*+MRx1uRMPM!x4d!s3D_MvUt>b8cj4+MBT$2@`6W+miDiWx8ZWhtF?n>uA0XmeR(>
zyf8w8qa_QGZJZ|l@5v<=WhRm-j0GX5XKJa;bawh$gjVwt2p-zNtd=(eww95N!Ql7b
z<nQnp3%QJK{rv4sc9ZSz|3z7Gw7<_T62XmNS}cTSRxuk3wopl;)-qeNxmYMIn9Pjj
zNkS|1-l(J?g^n1}`p>`q&0aZ6c3!gUSHjaKR_1nC>FafUSV60WsI<H+iJ7U_^LK{_
ze>-_KEh#&~K^l!n3`TNX#RB4{d;`hZ^<Adc8I#5oZT|cYp=hS2<X6dS+-|>l#B!l6
zN9d8pWE5#wCCixQyEaRAO%;$-UTiiyg&58}_%y;-GQ-*=(sCs-tW&VE$T^Wrhp+~9
zlS3-<hGy|*u4UxbQ_6!$n5ZIRP(kQiO9L~on$@0R?)4<&7W5%5w;+<T3Cq<Q28!5x
z!&ISJ&MDULJhPUEckEIwGoG+htU-mP$U=c{v|7msjul~{rQI+qcxn)3HfBX87ZTr>
z8my#|bD3b%n7KfHXPwOSTdRa|%2C7eVxGv*3pr+&oL`O^IKUsEPWvNnISZY3EE9IE
z^qnD-aR?(7gplvSbRk64QoFL|!@69ZkC{lF4dBj~$Kb`2jj@KDsCh1<WYgjRp|X`Q
zRxV+tmQSK8Pf}$pD>P_Z7H;N3Pq^dlWW@$qJFarqN@|t43dmmSCC^YvT<kHZm_%zb
zvlb8nG4QxMNuu+US8$A8$xt{gjPQ~gt8!LJv(Sp-6B*}n8m>aoMZ_Rm8a8Z}=a7)k
z6X7GZ_P0VZlwy+Wi47cTid49LGK&gh^#*ckNrY_`4#v5_Fq8AlrPAj*-jHF`g4IQy
zRn;P3e@1$wKJ&;b+@~l-qGjv#I#@Xc11?=Ywsl4&aY|Ey?NW9@ixOat@YM;)b*!=s
zUn-aLP=_=Xh&aR#LV#@KGpj{@2urA98MBw?myA=Oj35Sk1HI---5s%$O~zB0B;qEX
zE3_5n3Mq7bK~|B%jM+(57x4Q`g?AC^)R@hRNV@DAvmXRcZ0zfLS5iYI{@IxA?_Y3@
zIC0P4&~qh1vtvfdU?Iz^0wF-lheY!FOmLlf6Z5$$Y>%yWimU7IRfQd~f3jUFb!q?j
z$8~v*R5%)pTb<Pu^LA@(HC?;}0Tj4UT=?SUn)-En2Wvxymvw}n*BE75b8d5e=tG{I
zB1+L`&C~^L&XJJQyy8CPfGO4)_9N6fB%E_TvKatChHmEq&Dspw8*iJ3`?kpv74lwl
z0r+srz3mr-v1Eh{CG7Hpj3|jKB4f4|2z<*BhOWZ6_NJD;sv?kFRr99kNO#{+YT%ki
zA}T!ffasM&zehghJMwb^EHB<k6zh!On$<;{Q1!F?Q4wwsTOAs0=!VQBsRq#TZ1$#B
zr7e}+<f4l{>#z=HI-TY6*tfp!S4t&UlC&6H5wcjwgm5R-jwX0uPLxnVI+g7ND9hV`
zIU}GzCrEM;b!ek%MY2Mh*Gq?j^)M0H(#FG%5r?CIG#rf&Mz@2msec3pvVB1kE5f~l
z?_XSXBNOP^#*QQSBRq!f<OCxbjrUsF@Tm#(9eVPl#O==y4-O9|2Y;9xJlli7ecr7_
z>ht3I6CHT0(iG#yiB|au3T<b1!sjBP?fub!&K!zZC6OOVE}ee>S{`7%6$KGEQfUXW
zN)nck-&K~hLZTHB=7}MJ{)|>;&5lo9;)v)qPvCOrz?A1hACN<z9>cwE0_=@~6>T50
za^HwO|F-UyL#xgRV3qIS`O%nFYrXL|!iJ%=B6W0f>QloqiuOL-c$?o0j&25f01MdW
zz8bT=o5A>I;3VmPd%p+Lw_9;au`PjscWXr3VogbEZz==rwyGYOQ1VBM2UXRuZpZ!6
zwAHgao8}4Tg)3>DG#}jw*Hhox>2%u#y<f6t6GH1d{pP{^xWeu~p%vWie4=vSHFsJG
zks}^ez*nWRnwdQ8^boLyS_IA-KozjRtAd3*bB(73v_e2ov><9fjsVhQLlaI9uB-DY
zV6%mFvsmwR>qZz%|AqFD+GArs3vLOC!rjcw%R)vR(+0`l;Y2eN6SxZoU9;S`AG^Kr
z(_A-kIir7O2Z|p5ai6~0S1R}>Gla=aIVTWe7E$FOfao6YWQ5@pKi@ex@5hv#<$6?^
z3rkK6mB!@cS_z@&NG>p((_lshFm8$1I-t_LbZfpQx$()3kRTmRteW5-Ovx5w6J8oj
zK4521km1*QHi9K3d;s0XEG|fgC5?@tn`&C~<IYrXFy(NJny!-f%r!rGkRZPA4!?GI
z5R<+a?P|9(36w%o?zH`}&Dc?a)d#JUMGOTdNNd^YOvz0T_36&EBt9X^lZx^-;rs4F
z*VxTN4XYnV8awE{iyd}f12CPHJGvb@*8<%cC8Yv&$8}Yrta@Nn805;>?sq3DYvb@v
z!|QgLehHu2UuwyI=E8*XY<4PBCCt!_D9>Y&<kTS85}3suFc9+eMTx9xow8PM5S)pJ
zR1f6oV?6}R+Oon_Zz@5)Vs~f^@6z!r8~$l2|I;M3EvV-5WKx#j3H5rH;!jKMCz<ov
zr(5#UpV#bsP#dH{E<1Z3N;CS?XXG6*d(+KreY)q}XCLvtC)-ZFI=;(k&(Kj^L9M&)
z&F<u?d#v@s9|2y5Wh<?Yxm?fm$6Ky9Y-b1kx!+#eTDWaLKE0aPry2d#eAfH=bE|nT
zvoEaX{SrR4n%9#3FI4mHB~>LF(*@ykk<tk{oo_z|@7>`@8{2m%nXg!)8*BdGmuP>h
zHSt#hX5t66@7`PmY4}z~&o7jQcP6!_Z{2O++xGSCBl-OW=Kl&My{>9(Mn}H8C%B(m
z-)otF+4|m1HY_A4_LN&RsApnbUOFM~<|5`RiP3|pIbBit%Msh$zg(0TS$@Kk?%vy7
zld38;v7n`>54$eQsmocGS(mcJR;&b&8ZmEOp^_M}aCdb)W91!Fi5DIe<%`?Plfv%_
z<JhN$--W-u+|<`cKY9Ee{$lZWT-EDlz+T59a|_iaBDIUc<Q}oZ^>YCPp8|`d(zI@i
zvCTvB*(vR6?tELZGUxb$Zerbydrq;&-6+k5KE@fHToYPZ3Fzi7z3FZ>vhkS7G^fIr
zg(46(3`P{=lq`IM%m4=B%cU08xqx+{Sh7tJ%}IlvI4jTa%iB~sn8=i*|NVfzcHPTO
zGv!@25&|Wb#9q@GOv>qW#C#px<bTxXp_t|KqI<^NoVrh1cTa=sh1A9lKl7*=Di6Ql
zxOpso1Rgcj7w){cV!v)UZ=FlKv*k*M&bjiSqgnMZ>}+Xn0BBDSx9UQ}*%W`_zyAVI
zO9KQH0000800VTRSR;yWL^VqQ0EKn}01*HH0BvDuZd7G$aBN|8WiD!SZ*J^edvn}2
zlK=mz?mOU=tCBP)j$W2;<J)tsEGda9e&{r^y<3XQ#*mm9t~eya$H+=9-~GDrAOXHP
z8d<8#C{?>M2{gJJjqU~-{OR|9{TD(u{yny5Y)&^`kd0ZAgz<~rUGZc%r#_vsIrEbt
z{Vk2y&<^JEUA%j+xBtDh_srVc-*s5%1$Wr)ip@ihCT#f6IPkyQ*x>`%fuF#;4=jq^
zz{hd+hkN*+d_QLib!dVd{EiRc5lxd>5Mk4+H)q5m$(;Rd!4f;7L+XldobVh6jj`P*
z@X`dxlSHyWCP73#FguAT`TObR2KM<w3>eag!l1y9Hl!EWG!gvCNANJY3mH<6lgRa_
zYGCBq^<Oi8n#|zse*V~D6PkL-2kND~-*v>|AdPJHV-%#}*7i`1@=2#vl3&t_?Z^!!
zPaAK8grqTZcE~tQh|ieA9Fhbiq;X7WG`EuE2853j^5wN0#2U?l)N?H8YQ19CPc(Au
z0J?n{67rD|*N+oM9i&Q<86#hAgXks>sm(0K<`;51bL|;%W8$#LUBHl&D46r+ua8OA
zVMFo#hxp|WHAQ8T-Sk^jWN&p{gVn)+Tbq|`%FQAm!c0l5EJe*tOe~AU46Opq2IW)C
z!eb9i2!7k#$*pE<Q@!8Z-u~1syCHIeWcAk8N#u`eJmLeR-2Pt&Q*!K6?=Ere80L~i
zjJ$E}D2RheLPoH7T%UP3y)jGDuu+t85ZvrrNP4*`)Yf9_I_f6yTO}r%qhhfngSPM&
zG;-<KWBR%WXXbiHt=h+Y&fZ^Vy|*^`!_Dnac{62IZ-ss;q|MuCp73zEKitn+s0QZ_
zzFTk-)OCG(D1NuTI*|neTXQvsRxIbRJc=NqbDh7@Sx?=Qz@NC&b7wzi+~B*=LMN%c
z(rMz{!3!T~1<{G{|Mm16TI*xgG^-s~kzik;B`W+<F8Fh2E6RV}%ofD(UC1K7uBmqp
zJ*KlH-py8VytzYkACSEOC$K{_DkEm6k(=CQBn+;Qj3!i_@Z7UhYp6{%O*&BldK5An
zO?6-Ql{M1sZ0<G)x4F~S+j4Acb0_uPUsEQ$#8x*2Y}ZL47Z7KDKhGpenv$8vMHD!x
zotc#6H=#GoU_@UYJ4buS`R2~1V{h_bh!9{T1dudpyYsH6Ixm7sC&9&db<?YaFDMAq
zAG7G)_@B^d-|*0%#j76E4ZMnFdJ3<3_=`1*%1J7XF0-0;V+!fSh|vfV%7(QCORJd|
z!OEi;b{G{6yTq$?!P(o?=PF~m){e6lRlc)Ce4`MpbyGN~Glhe03d&63ICb2l&I}H|
zof%Z|QEdVpC43+g5PWu-{(}zFe~?eVLAYt^59_A>u$yACsXv1hBe@&d0m@fn0f*nt
z0vgz<HiVAyK9C_8>~^t-!w&XvnA<}Y{U)<`R%aH^x~VBMi=P<vl39&CJo|R`P{l{J
zA#{}Rfeb<L*~J2$b+CYExdj-6o2LG#Zt9P^DJGlx*MWWG1h;<8<R5*z$*<<5dipy`
z`9RaJIPGEpM;#2{C^vut>7ofxc>-{mdaNoz)ZZ6Vl6`%C^@g^Qne073viIoGo^`nQ
zmp$v*<a=sS+osn3ggu{(C(jQL_Kq}4I-%wyvNQ$99*Yv}r)C$eWV6forith*JWBFN
z%ZAcT3e#??Cgolm9vUsZ;mMAgkQYIvn@nQBO>S^Pz*ZAJXfxr;w5r;KdDHI?9rpa$
z9<>hlpE=gEBVhD<cCc^l?K$jVJekn%51d*PZc2bVnsAr#yPNPgNq#F#xSJF`O!(mO
zO}LXxnhEb!nlP#k4=C#oFI0=FO`m>XrrI@oP9wTv^TNqfc{Jn9Nxgm)-*`K2Ix(u`
z+&C|**5q}I^rrBfoBYVIr0IEMO7k&GX&R0VD>z<-2frOJZT=r68|BlgDutB}s){yV
zoEJ4<QOYHRjJ>6WRJFpgkfpYy>aCPc3Wu`E`a)Jw0(q{5%;iE!=Ttb1f`#kASi4eP
zS-8++K<H}agoC|<Ls684Jd`b5cB?g&rJMSL<I++$!;MzK+qkYYX)CXb=^Y&wGT({c
z`MFy7^T$7#S9VD48#-mhqj}vLw(~mQCoLt90$?n0^@@@d*{D?I)gXczC$>^Kxpk9S
zUb9|^sU${Oh!dPs*H`mnjzu26gr5y$mrD7y#+18&PX!|RRG}b$m@kbIUEy8D@=`y)
zoB!0Uy)D=@hpJ8o_C*mn1ErM-3BzIK%FMdl!$p`irV852uHKBmjq7ti{Uh^P<l67g
zE85hphpa(n`0r)mu(}<zbW7#S&(+1oLchdKyg~(*Y^5;-2Xc%nfc%j9;`DsGhC-N*
zJvW}QD5p}>Qd{M3XvDYR*yn1-$aOyar!BQ8Z*Om9C3i^O-EGYcOx*>Gc^%uPAsxFO
zSRvk70JiZ;ha{Gt{O=HP47@|c@gI@re>+5-1rX{xM4Su>pX2&KucG*$%%UKj&iLSR
zoXfM(6*;~*ACgNpVG%NdZ{Z1X0y{-F!42gF`I7mYGz^0%(Zq{)DOiH-vE83vSszB$
z{`2S0zwmPXJc#i23H&<eWQH~Br4ES5ZU2(}nz|A9W3MRaERt%D8G+azfxU5YvrLyz
z7(s*`=t97wQX-B|$e6~=!6!ebG0GM2UWCSkeTBG}FlR`92s|&i<ub<!3uA00ZppZ@
z>^D(XM5yON=fR*@oEZ#2#v1mn<p>$|DN6+PB9-EBFLP_6H{jpnU3CM%DpiMs#1H}%
zbHZls!<eAZn<-hdkPPuL6;H<T^?g_~2=(UBJVlp`)*0qBqT%d+1efJlq<$*>8vfw*
z7Vx0zs>oH4P)}RiV!1}lW_aPMngveAV^b!4a^Cqf7M(wzyl&`*D*&0ltLa(Y@sApU
z{iKxk(_cc-v9EN6UJogm>4%q)P!RYm3G|h;ruRcioJE@cvZ}6qr7ZP(Ncr^O*-JXn
zv9D}}UNw?cJ^oZV!bVIXlV|sEQ`MUo%~72#z=_7hBFCOreqQ4}Iq6^P{m(Bx`Ck%4
zE<wh3<jS2ho^ZmB#39Jg%BH+pI_aPc$&6>6q%!@^<4RO;Oon8Y?>b3X?Qb4e(##<l
zG8Ue8lCJ1y9#<~uhzzNWXPsm+{mYUP^>9DvH?LqryOiruyZ2s+jYs1ITU|<L-H_yf
z_}UL>BAw4+r}-P>x*-2e=Je~9p_c7p7jc`~jr{<RZ<0ISe0yc4pfu1q@u`)*<czeR
zr!0Bzgs4^nwa!ZWdCHpTkuKHhpu(kTKTlcu&goRG>?PNy{d@z-dpJ#bBIGW>UQZ%7
zf!vKQ<v`U@;(07j1(iDL)whseYSfIy+w}3IuVFe~2U9g0ofI2J0T%a(#y0dTQhG_~
zG}t=abLvzM`dyV3K9C~2I_0$z8<g1BudkKapv>+8Vy(soHFk|PPg03JA{AXw*OQfs
zjhZ43!OsF|l41nguTkrU8(+wR*b6eDUd*c6RZs6m$fCI$V~wq*;KW<0y5WVamNm^_
zt-TOl-BSHKm+0!P$z=c3jYE&#U9qnTl8^AiTz>wINdVCrV(CJC@5qPXwT?&>NSub9
zpeBGEOdWS+cU2lY$953*Xs$TA=rTpJ4;L0%B~i*6XcM8IP7NLAv5aPY%Sy}VFKWrJ
z+ERAo8O)^fGrPN&(ded<1Vj)eH$c_+RJOu&$n}VcFTsr>A5!rcjeJqJqvIe=G!jTT
zFRnn(c$nXe!rKP?-hudEYaaM+5=6Ur!vM>FyL1Y}ShubZkthBx7$?;At-K=bIu<Mf
z3&yCc#VDmzTXw55zkyLxTOQ{uYk}1-s@*b-XJh4S-mqzCHeI#r%FXs88}G)jFk{`e
z8r4)d#=5L`W?)-|sysfj!IGgN&7P9uFvPFam$KEu0G*9BD<1BG@vYWBC?%^xJ2?TN
zupkNXZ+A&8tAZ*y@mwr=pPvo}veGJ_j2I|3fv37ExmOTLOZhT^e&N8lSirY0>MoNf
zF%pJ^^q3WpT86T|mk1hWqh_sCJ+4V95EUazxjZARG}o`A&d0bf2ZOiouFhV7=C80`
zonQM%V^~#H3qZ6`7cW$80#t^GAF1aNEJ%34G_JeWF%(11G0Gs)Md~G3TF<Xks7oPu
zzXa#V4&o#pl9L&;Z}_0sMZUtwwXsSNg45Q@>HJ!mxr$`VU59}`2aDEL5;r&bylx)*
z=kjHRZ@mkpoH&cypn86}i+Ohh++$<}L9}O3tpJ^Ie-kzfF=s2@CKxh<8|LHhpg*A#
z2rJ|Rf?EuW4~PszF*vW74@l<Bo>AY8=R6$qv2nx*D~@cz11RAe3()>`e)A+204>rK
zJ9(`zv|<)5T-*2^qo=h%=Bx;B^DrNhjcs+MrN}?Ok4XK3QKJ8S$k{TMhx96HjmX=h
z)t7jvyy%fJ+H#*KRyTUk46n74rTB8H?UqQ@<(g|*9_&WJya@xn3njR2RL-hys{pag
zM|UHWeK)3G%(<4OrEVnTw}*;A9=y?oR9=<Zsk|#yzNEBMcSR_Fq4>`NozBx>@L(1@
z7>usYF33Kyh`5oMio9O4t%BRu;`?Cmiw_(7+Ldl3K*f;G<ut<i5NPcWInoag1$VI3
zRoyU{QV$v&49Q!%aHo7?AYAZU!Nhtgc;n>aU+~&7`9Z-uX>Yj4-;r2IWb@c@w6~iE
zzdpMqHh+$MJp=#fWc*@Mo>93BJmCkSH3S^cojUf=b%nIWra;IgNaJv-#gM=_M?>-o
z7B+e;=nyfm6i0M06(=;ty&cX`OegGyu@J0kNd6I|;QS!6BD9vAmgE+qt;-N1Dwyau
z7B#-WS5g~V#3D}Q_*nVugBA*n^!y7*&FPKUhe0gnGE?9KMl2W+xWO=RdA;{x4f_BM
zdlm$sf_HDva*-z7X3<TdX7W4ZBnUIpl_*>MDr@G$QTh0U#&KY~yvl3_7_lfI5}d!e
zcz1bq{PqgN!7DZi#6?aZ$%oAqVn&G_GNTLObh4eCn)Up_MdZ$DbjJ-~%Z8a7Ba<-0
zPKAuy1ozV}Bn<MX%VWdg4hEK62Gc|1;`AIF`GaP~4JV5F!f!rUY~Ey=cj}v(LgNXT
z`A3&yZZ!-j8)w=(cWTpa@l&@WRX-b`L*^NqZJ44)qV>Bg{K<}RPlE6c=jSyapuS5J
zxyRD4v`H|@m8n-V^KYu%x>qYZvM+e6_v%VE%*-qhJ6TBLgSouMlDj9vm1a(3h&~5m
z=Lru%*kUj^mF`QPOMnv^r%4i^s{prv(FXoYuK(>?HoTGzOL>wQJ_&ekE@*7GB~yPt
zy#z;M@h+nO_Afrf?vaR@$YIEHc#Iq1tJ86&50MtB@2CjJo6OQ81qcZ#5eNWL9x^H>
zauhC>5!zm$jL9!amQrKfmd^~|T6~0FRXmf5eg#=Nd4KtuWMcnS?CdR(m{@7#z1%kY
zsDSN22$G3t)q5?HH@4$+3MqC2y-sa8O>OJYNUx<GsL@jQ3mfS)wBa<e%)gOJq17m%
zQNk}hY(XaT=FRTu>Fz(^hy3)@i#Kmxj7E^9qFJapl1yBoH_**O6SDNKpwQC$jHS{W
zIjt2vrsOs3oISF2DljHrkn^`cyxT5P9N9DGq+Wqu;i<-Z;f<8G@U$S0_7<{T{0c~<
zK6s2W4!#oZl=*5sCv+Myrp|O=0nWuI4&aZ(p-fD$S_X~jI9M>TSdWx@8VoLAWzS$q
z!LrWstfrfPiTV;s9EI@hipaV$Hz76x5!pJve6vlm?+YK)U+ZZk?w73borV8j+5~Bt
zWM$3=X|ta~rhF$3EsDogTc>#dSh%p2a^sXA2f?%kuy1o%Q%#|yJ<N&U@BzuG5m^f3
zK9uqX1Bg^I=$HrNGIu8VF-l=C6Od~N8zB~ZK8y%L0Czb}Dx865zgc3lXHDEFPO=78
zcn2}q{|*M?I~!gw5T|`YL8>84D=gh0oQpjo55T9eTD^ceRp*W<VTZVxF+#%-hIJuX
zCud*b9mGup6LJ@P<?&4+e&^`ve1J~oVG1j9D8eneMN}0U$x!WtegK+y1c*H1*SL^%
z_$gn&a!dOzWPDria5{%Z*iM3wc-&`AcmuKDV1hy1egN@!$bE<$j_<*_CS0(1HSn=5
z?uL;ug*^{E$=(bGy!DIR5;6S4RPBH>$|&jyPBtSHZAj)hz{B|j)r5WhO;DbP+n_rV
zyHg(+b$x^0YB_|I21eoSv;0f(vx(=XWnQL%a;QFNlRK0l_nNZUUvM~jqC-_i1(Tn|
zFGOZXhscGPI5AbYpyZrTWA?Z$<;Tci>EkH4jk%o#K8{S$vV1%yh(&8%<wG&xSQ}7J
z=(J&x%UF9Q&u%3FJ2SMw;6$9m;3<q*I`gx1cI!02Y1QY@Sy11`^HffKTaa~-FOerw
zGWCKn_p}0RAqSY|+SP>Ohq$nBz@s2+!*u`|`ht3{!wV2RAq;6U!wQ9@gyx33jjSb)
zg6d#Ioa=Bx$!4rr$PVK(YZ{U*Hk=O0hqIHb%j3V}&$iSN)09j}l!Et|Gfl%6+<B41
z;a_kXdH9t*Cz*C>jtY*FqmHu=((#BHrk^FKu8>9C$b4B_0Mmn~yuPBVJx0l|BMwjA
zTuu>fuz1ph;LW*X4(I#%P!Cc(6pVq0KP1P*4-$9cN=fjzU6jl*?U*3@B}2tV!sk2L
zL5{Y$3I%uqwt~ixa3Tx;IV3*@*(xR%Jm1eO#;{FWKS6!KlPz%U>adoTxDYWELeaTj
zdY7G9mRRRWsTKiX0qVj)2FK&cdFKC6KT`8C7z=nL^nnQ-@8l%@gS-XPqUENX+@Uy9
zWz?RjZEfz|Dmr0-&;f_+@Jwk(;!Vt$8=>`LfdnI?s6XMESj-So9HKWo-d0<|^|o)l
z?OSjAYPNm&)(fT?aM=6EC0l{4J|lB50l4!iw!ti6!J<edDe#^sAhg&x@0T@m$K?*5
z*j|u2BI2;G{2R|5-h$&+*y8mLUbv74;(T!v{++^qX$kp{!Q%Z$w1$xuZWQ?F&%qOc
zS8ykHT3?yK<&H)qQ5yWiUr+e0BLx3^ISib57=*68;wFJ-()f$WZ{P8_h$rY(-ijaN
zj~Qf*408|sdndNs|Bfi%6!-edqWrMbuJE83X-X01J}517^>-~w;j9OcQ`SY@BDyEU
zjqGj0)g$&5eowOn$$@JEYB_p4i37H4B7JF0wnD<-zSLJ3V2_RnWeB&#-)b;KvsDu=
zTPI4@gcSCUF-4Uv7x#f?k~D<6>k1tiGYUqn`Vb|vP8pMozx!e|G!XXc@V7oyEc>dY
zF#pq0)yylduHKy0uv7U5Up{Al@uedh@+w;^A5uFb*}R1%N%e0cpVIzLO`!uUH-7i{
z0s=jv<y5!wT>l1JRl^f036^l7`ad-ntSf3mZX14XFecTe25zj3$M>nKx4H{l*%e>b
z^lLRpy^mb!BaW<Q{Cyt-e|7~vK@s@5%_VF&=3VG~9d^OPQp1=KjkW9+TbH=5fb;4{
zps!<7T?>E8DqD@K4dXq+_md9W^;nI~q$<%7mxY|GhgJOlmn+=gAGGEMy_b&Ow>lSS
z$pKnpfB%?o#E$A1Umx4M$8=+uni$?Gc6W~1&9S<7jLu?jt>0Ub`{`t<#;WcPh<P91
zY%WTT=F;A%0r;}sQ`w4zI-twtfhyYpD%Zf2y}v2x0!-P0`&T|GxF62nMn8PNp16MP
z=N!x9_ic2??dyTpw;acXgS+mWpH+ejv`J9YYZa1o#oOEHgR|EQUvD|SyW!|<bjQ!@
zftzP;MGH=n)&f+O1yfP8(@K1TKveBhrzC7$u}=(Ws=H*JSM(DFlIkvLhjsttfTFrf
z*Xkdh7!XvG6Ox%$8{kuY6`~!!qzSg9mq&UO$dW<{r`<|cq?oSG>`$eXzW(n|rJU}L
z^G~Igu0HokD5b$ux4<cv^|yNX<ki6@x6l6S;E`7Yi@Yqyh5etwdF8uC32GhSH;|+N
zWZW6vcvY~*%ksSpeDP{vi<_2nGk#e;Zdo&4nW>{@e6misWF;k&<<O<dDmK}BNc^#-
zaK}1AGxdRFYR4CA#T9GA6Dya-OJr6xqb+!0ZIk<_!U^k(5B3no*MbAqcB$f1Vf-eX
zuPPH$o988Pz5Wb%UftHIQsOeWU2D9q{HJK!`acUHv>lJDH4j<iZ{?QXgum50!CT{O
zeFL1WWoBiKr?tk@dU!mo-j=z>&06DTJtf?%Wes?ZkL5lrK2`@@tm;ix7o4U}_)Hye
zuZlY|_0t3As=Vvq1iB(GRds)8y|m(0wX3BKpX$C^DL(35`B>vjt#PK-9~`egIDVQR
z96u49sg>bNE$NS+HjdP)@S}PwXN?oJ#)-Ng3R5vb(Xn9GI8keys5MU18Yk+h;Y2MF
zCf9gSYdom+_H4a9EAf8M?HRsZ<3T+d9#qqvzX}kFRDPaY1-`S9SL-iD)d3aqiu%5|
zsddGR9lwej!Qw&;c)@WH+{FCGl&G}wZC+KaRaEm@3aqj;CacK&6tc1kSXl(biK=E#
z6~Hs<Q<ezoMJmPNUbbzrs%pB$TIBMK$<^4GDYHy$R5#DeYUuK;8H9RsX!KT$>c-vv
zW&b_CnzzMA`|5;7|89O6WD{+L2}$0K@t!^`v7z|48fXL-k3M~0|KNV<FZFA|OCB96
zMC$iK<iJI&5FPZQ8cOB=+WY$D#&Ko8|5KHBKso1L*;}HmPs^I!*?YbA>{-{DnRSh4
z_9QiSRFp``yd#M^B;{FOudDJ5$=|6|@@RR2JVLthL4qJaQXl@BrE1qB5kR8>G#cGM
zG(h7$1KN;lY4&2=G!H%CwjS?!!fyouXQsK|loj6&q82e$r(Rp|myq6Zgq6i%VD!oU
zjDmd>uVE@4eG--y9<&<GK9ie+#3vAy?EhQn&;OI6e0i4{E`QRCmAJ)3RpjaIFD1e(
zrm9JcJ-6(hSk}cTBmM*SK$ZEJMrO9PtY!mxO@}b9I^9E9Fr5n*VJ=-j_}cR>CQx|S
zpZn3CQ1440AgQ~sDv@Pv88m?=K07L)@pqZzYfB2%d^}|*F3Z&ypG%m!QD&_ipgttz
zHKG6R?vXpfPAr*DS^hz&W^zb!u!$at_zj-<!RyNmPnSD&B`d!%t0*sc2d^>ob2*z2
zys`Vc7e+9!o-=Sj7u9NeQr6Fx$?+m`!u$7f=SoLFB<qNrfg1qxVB$K4!Vyay4D(q)
zc`#6LM5X~whC!$$#DJ#X<~d|o@f*xyAQE$Pc3Q}bsaLr-cJAHyQ6Z7*z#Z#(;jV{Z
zBtn;9H$%y#xg=g>D(H=CY6nL=x5`h(#`D^iP@R?l9?2u078I~Ekw9r4AmA28;Kd9g
z!#H5%s=4<dRl~sr5XbdcS4gDks=Hv@SZC*k3d3MD@D@cPQ^52f8FbcwP*3nZI$2Y4
z>f`!sqBf_Q1`f-lCxjEz4#0Y)cB*?zjzjRb3<SM!5Q)r#FYfKY#>{%cyt{t!LlZUZ
zuxm)xjS)QwsvRPBNc2`;DGfmYk1D^HCoGrR!$vi%pRVA#?MjFJKiA|uwJR_J!zjQ@
zwbYb4x!n2Z1%7|c5-hPqSxvkm@^S~mO*7;&Gge^$o+fp|53J^2imJgvqTT!eZBkF_
zOr5&cuw}`x0;Lw463a=>Vo|UX<m&fay`8I%&001+4mqkZSLvBFnMO~UwNSB+DNq_E
zRYBgw&Q98*8F@Ls|Ne5WHJ2{6_Xo$;*|}`F?`X3o*BiEU$&o!VzFN~12`4Oh*}F1@
zwTZLuJNj6*?8D5Z<j?g6@)mmek9h+*v)0Xbm>Qg^GpCt%1Gxbeh|^2BYfwY>=I3mn
zW3dCYkS{P@2Z2aCab`RMRyTFJnXdaDnQkD}``9P({f_x}mFKu#h6_no^65FLg1gFv
zfO1uDzJ$EwrRFQ&TPi-fnAYm9ax75YRi2a<(8qJXt9&KRpx#)XRSc^jKl+Qw`3e%*
zU))_&FVwpYSczbDsV#yU{la5JE+WL-cR3AXaaxoy&x)_mA*{L@HNtD^Iwkg{UUnna
zRO*7l_I5Q4FlPy9brS@4ZS>TP?Q7A})#l2o=;&&wXoZGWXlNlX6&hNhp%ofhp`jHT
ziXYQ*lCxM8tOU9GJy&n%>SME(O^-v4YRpx7CQYW%Q)VqxtYZq4MoCqWH?gymwrEC{
zMng-Wpa%3)i+U>FeHoO~fNn}&bL=y3&wyX;MN3AMa(#>ZIm4Qz-q2JA#w-(E^o-!j
zZGjPHcye72RwhxsF6mo)UD5{H>v4iATgITu)>hz&DyWhPE{{C^GXzw&R4v!KQfMt?
zgXGBqDqCqdPUVu)C`SF_tSe9T7a35=<XD@3Ww<adX@CuL>e4`m{CaQ`Y^Zx9LrKVx
z6)lDfHThP93O}J*FycZ>NY&$ESPrG#RLYFS(Hha`%d69j2h!qrsaRg|0Ma$Z`MlB<
z<GL^x7%}5WG~Ea#(UGIBIfcg72GHKQVTcD(HHCRn7L}p5g6m4KD?SJ8+VDKSQG9b*
zMt>)d08@RrBz&4BkH|5dt+_<leZ_hr$u)LnVF$%KVE4|U$WPJ;(_<hlH9i?@Da3+L
zrff!>Lp8<ImuE*-@KZEmp-$7NDbkus<zki*upGJ3&}IUmt(Fb5l9U>}S_+MjG;kG{
zRmEkk17NgdxS{nBaarjaUTRzxn`#@yWVNzjht32h+lt95bPG7CDkiHGcp^SkOjZ?>
zwdI(sLd~#lOjg#Rd;alQy3TlU@mQ-jVoilEC~OZ9eZY9E8~|u-@MSCUSh{(#D!5V}
zRH?v}3QVcMlnP7{L@O|bex56sQUXM&!aBaKu#Q4hWaY396ADshe{=CX(2i~SGMj~T
z6rdVaNJkaY@z^09ZDUABdn+DJ71F^3_f6`?wm(B;M_W~P?JI@WLbgesEV84WcI;Iy
zDUD+MAkMn-jDL}l9Vv0v7F!vEh)Wu<h~g?W&_t?`5usqYG_P7GrICtMMa6)HIs0n3
z#hdhzq^wJ*9!669!4bWKIf-URXUcSv!={;~Lo+Dq2A}ySycHkx8ro5TH#ATjvRs1^
z%cbE_99z(pHXeaHo6*~z@v>K4SH`KD`sj%UO(8Q7v#kSGXCb~54dfy6{@qB)3kQoN
zlm7f3WvIllIrJo?!8D18LM{ifQV14wSwiyDhqvV@8c)fk36>+4CG_5a;~6l#yrXR)
zPcvY5!Ni@9*p1Fc{Ep=rgqUaTQ;qr_`^|*~!@&6sPs^E;s5hbr%qH@|j;Q*=x;6TO
zW*P)Elc1w0ReduyI_*_>3@bxU@bnnqmhpVk`!u+f=rBb)6=)5OfaVKdu1sk(afzv1
zMu8OTtb!@72&8Et%T?Ct#O#`-nKSwGK*r><rbiX$RK+>1gXpzo{H^^EaZc$PUTU0E
zYQ}98?$pi#fjYmCY%AQU&{yW9s&J=Lz@qq6;Z9Y!)0V@X3N^#J;Z8<)<M~HD>H6fw
zMLn(Fh&A=Pps>9?g9nUy$^l2$1}3)>^^`MRRs|kc1{^D(u>u-d7gj)H1vC~BtANG|
zXsm$73TR9c9~o#Y0WelEfZtXOU?F0-atxpeAuJOR^SqG2ZTb0|g#s2JepM)76$<#+
zp@1D@C}3wRZhsXD$OM<a75dK*1K3fuT<1!mwUBL+CyN2>q+u?VOG={{O^dUxJk?)h
z3?P$ZZT^)pxVWSNi_57?1IDr3Mih=GYtc8Y?-iqItYk6jrpfoYCi?_6{Q<h$5R|}x
z&;J1h5|*@p&cCmnoPQ#p=utTOn)iV0{?neG@My6d&=Y|m1S7<VG|qO4+y&(%pCIS9
zEXgxx>gE&lAV)5_Q!o5NK1JTt`*$kqW^y2~Uk3EgGRY2I0IcNJ@Xnnf2w19)8O>XQ
z=(+zD28SIH)00|Yj+{e?oWz?T@Pj-GE@sdnPHu#nLJK;vBrWbV5B)%UYBFR=nnGYL
z&(Sl!p*Xjh!br|%CdcG(z!mQRr_g{+p^fLy$G{$sy^#Z&F^|zm%BJusG{?ihIp(J4
zXq6KBq12o&F^fyg%u-V;XR4T|KvuT1f?FV!`Jx~LEYfnayH^EqRY6?qKr$T}K<PY0
z5Ldc}mm0*yCfi2QTb(R+qqFGAwxYKRy&O)eiry-P1&L1;y;VhTZ8>_YP&2F>y_NM(
zpMThvt}|X-*w*TeSW}@33fseXA24hy2hUm?OWI1<mTsP`iWQZ|h$?KT!iFkrsKSO;
zo<9{fRAEE>vpzOd0u!p@ZoaL!n?jIh<+vLYs8eS5`I&$>+j7k|3%Dr&X{vymD&Xd^
z18%y;fSc}C9JVUph6(OlfAq!izs~;@AvaxB&vma9S_|16d9sk3ZW^Lcxui6Tk&rm+
z%9H&?hTI5A)|OZqNQp}t0F~U@G|-C3Zv<E33~RtEqHHn1qRsiJr`>pQ9J_o1I7#$J
zcQ}chQ&5})JN-nmF6`<D%%I=!<<THUrjt#OV^Hdl*{3<?&7-xPm#4-#`{_1^FFd7o
z`#9cr$%8f-LC70nW#sZkCa<T>{U$rDsfk*JG-UHsAq{1`-LCALb{`_7Azi~u4QUY5
zZKI%uZq`56*-T_xK@Ej=Bqvn`HI(wV#it5tsDc`{9Mn*#8P*MI(AodbKdeF59WO4d
zVf99=snP|7?V)H77}k)38LaKEZzZfjKT}rq$5-*gEC0LlzbpTne1raX3BSAAHvYD@
zjSC&=mA8#ej&qqklxO20Z_E7MY~#4V5w13ltBvEw*f_SK?%T*4eOOLiCYVhSO!=w0
ziQL?Zd0cHGv%8*Ph9;M~g@a?>@%9wEJ|yCINbvVJwYyv_dAwlrN};=uEtm(}Y0gg9
zjHnz>VW8zXqTBH;KkEka<9Lx$n@@@AW_>Fk(T`US7*7W(a5Q<=oz5|VLYQ2c1Rt-x
zkceiJ0A(B=Ono1?osh8~kU998>?S@pAVc@szVR?@)*r&k3FZJ9-je9r<*q6@hf#o1
zvwiXr9(uG3kz(YNQQ+dFaq)6Am|5POmJ?%2hmu4%KD1iAd+wH29?wq326P@$v*(0)
zYGmfmy~q!YtYmwM7~Fm7`ZvmsMw)Pan<JArlw*4uy1Fc}6VK?zWW&q(!2$W%o5G+H
ze+lgciJSoENgJUJjytxO(};lDh4~M&+;JUnCjKB_uid~!2jnayA6ZH2xxHqb5K4Wt
z3?qMr6k!<-iQ|*G9}#;x^}iCPnMKz_cLv^Y31fm&1S{Z|DoS27xP_l<+@<=&UQZim
z6U<|lgriiJq+OUP>0S!C${7WyqU1Z_k5hT^Qpz-8G2-k#M#H`*9h9E~7yg}(=;)k(
z?7lN+J$D1ocXIQIYdWc#avg7}7dA9jK=q-vI9&$u1V8`S{G}-Wn_^*uVVF$7s->$j
zH4b<FN~c=z@!HmR1uydP8fv-rr%1k`WrPN0BgNwzkS1hBOAkBMgBghU(+P{a_JftT
zhDV|#vyR!I8h4g(5<_+Lo<>tmG*>eF1U{zSPS)%m<43p4tk()SN8Z_s1t`vyo6bsq
z<SX7UerVVQf~;fDojOJJ;KxuGes&ntBeb71-%ZuhQeX>1&M`OJkxNR!R6^5r_}Q$R
z5jy&7;4iWH7j6{sUeIr_*^^1&PUwUan<P}R!_@vjUl3n*Cyy!BQ>Igm)p3Q0)rha!
z?%cUp&So}SA;i~`jM&IN=i^sUJ^_r0x%o8nEsU!-I+qOtgUlEuhEd`qZsTrzi!Pc`
zU=p|~rLYa+q7@dM2*mA5R`8!;mA4~l9X~!JcXx4(_xF4qGL8rD)z~sh2qsIBSfO4)
zKi!ER_xG1`J{m9xcl;|<c&Tfrc0|4Th|Vj}n`3X1ED!o2Wk%E)FO#z@K;8+TCZ#Bo
zGKLM!hQ{F#%)#_h*3~X$v_Rm3+{{m=e&{--I49^pMWbur{hb?K`+VX~sU3n6TvCG+
z?olhXm+?VLLk7<}94K~c(bF-5nZ+(5xJP*bLaVwX32df%-kRWGqF|b<GQMKe&Za&i
zNnF5G_iJ++0L<cc8GLq5wjipfWUx*V$Qfr`8SE6FDypZ7>cKMKMpV!GnnMloF)EHV
z01bV}&suE9Boyww2cWqH%_yk7^qqoM!A?P|+9~k1yHg;&D`Oz6(LeW|fhvQ%VCzbu
z`z`Jnw2WF@Z9XOXt?U_`Fd*Na6XCleGCijc91hBRAqkh^f;!y@*AHC+atSrfJn#bd
z1x63qmLcvmfX5EGl6O-{`2Ns_5(K8qY&ng*1?~^n6kjB}Y+r()ZkbPD_KSC{5dLDY
zI!RvEweLow{XN{5zzq)j77_R{kq{zcM-&$4)lOX?N4R1SiA^R9R3#usFyvO`TXP>8
zLu<$V2!~v|(*@g12_rK0N6Qe|{(23B!JoxJ+1Fa-`n8+unp+aPy}Gi+PP@7r!O(p1
z>bPWEp_YCZP>pUZM8VSC*0w_GeNGg&Prd#oh4J$Nq`8#$>gYEZLPk*g8Xsl%fW5y6
zv!~u=r0y|jcNYEtu|~j-ifAwy%<SKHGZ(Uu@AhyXC*C+=`zG4qd*DrpUqI*SGgVs>
z^5>DaB$!;N?~AOqCDPjx@2mX?veAA7SDaW4*QfgK6!IvnCpzHzoJ?a6n8wDuDW#rI
zK3R*gVDf@GL#afyV|MA6KD&6q8k?v5d&%y6F1soesRyARxo^?>FbluDw?daN)2@nv
z!U{aCy3_NZ`#Z5sB=!-AMegn}&;31No>pp2M-%VvF7*gA8brvv4a67nxT<SA1d|qQ
zUg>SBO85y_v~eQ0FQ*gyc|Bu{f`uz=k<iHN{^k5wHgeHozPn4=O^~UqoNu_-gvOx0
z=hok9GSVdaou-~)504o4neu9=wwcmJp363qiYkCd{W#l9Ev+$Gew#_d_{Q5ztHBK9
zLAIGn!aSU8warv*GgaG6g#sy;d5~?UvYKPlZKhnPYK?s+6W=ijh5a)7Osmq|f@&1h
zUe-PnRyPF8D|7B7y)CpZ>|E_9B`^~CJMZgnYLiF^kl1j|>^eNzW>894kj1ilKO+B0
zyiKp)N?CVO!~}$C6kdbLsoU+zOm48~kMwsZ#;!pro0#s4h;}CX9yeaNwBy^m!9_h@
zI$l&yAoj3MxOdFq%zAtu0o@eguf;`1vVLmT@+o1<r<b5iHzWT|Yo1+~V+x@Q13N{Z
z{gidj&fTTZ_m?}bE_dGhk&9#wn)?mB?qJ7*sTo4jXUG`QljX0PEqKl+0{k>kpwM7U
zhPuh@WIE(=p(9bgj5Rd#YCuTl3<|}>!{~O(2m{rSK0^CU5cM3IcGz>8oldiD9l9gi
z>KrxN*09s*S)=}_H|}*hBe&D0Wk>FG`Wxapv{>jyAMIgG^rIb2+=!;c-5)2uwTJGM
zrZK@_+%1PvAvqyt8_Qnq+}9IkN5fISJ?wR@_Gr|%I?aC58n)Y@sT^Rmci3%>+{V_J
zl}_no8CDZ>nC>_GM~8>wL+hyLHmpvsKeqaZ@W*wXQP1i38m(?~YfQ_RawsgPlk$4m
z?RDDD$g#TJVb|)k#y#t(+ihER-)XiQ!=}^g47bKGRUaB|rRO=Uw(L&p@DRn-Z49kW
z#~oWohbY3fdpLBC+*W&w(wn@|Md4LWP?^2Dho^MoQ#=fbMH;*rkET2Nc@_NaAJcQu
z?vx5iROw|(X^dKKr`G~Ive|XU(Cx#vb=2rItj2IW>a|?g9yV-Bpj0h!@8I<$fjytF
zR!rlL$J<26hd6;Zse>&IKk$7$ctC+YmMnH&SX)CEtb5u$R0Kq091bJC!w2mKe(0d2
zp7#yUn@5I(_Mxdnr(;Ozv|EOhqeD}fX0K)9pw;c0=p8mXrcyAq`zF>~plVGd<JvT7
z-R4opl-BF@4td%Yj2ev`IHB8Ed?<0^phQp`>vt};hTgekTMn8$NsDE@G440|u6^Wy
z-spk=H|?f%G;AGOPRng~nxLJVo&FjE{2O>vitI`e6teKP48lueS}v%(CJ+Cy^dnY5
zjnZ)3sW<bel6plSz<+3#qxC``eZIU5F4+||cjWR?^v)$F!XFyM0sq!%8sk-@{TG-X
z@DEsG`84QWzlq3upV43>u2{oY9?H+0)151M=z8te(C%~&Eq63(S)Kmav4(D|YjxYM
z+vz&(aevfWW9YE&E~qb|3?RKso~7_hgdT7dv%1T6K(l-3*$OZC*9Esbu!Cq{y?O<+
zhu%uWRo$_?*nP(qrfdJ}DLY6EPwD7kUmL|HJL1QGzc7tAPfE#5mcYCAVfWzp_>@w~
z5=rh(qxsM+B`k9RUH<kT16e6GC6D}6b<$6ASJqQfnCfI%7Twm^?u`yR)~MAOSsk}G
zwEEpHm`hD~IBt!=emYu17T?5S7K$vsk?*pqKb#oS&?5R<7a~SGF$oh>-f4Fiuj2Pa
zWGxXRr3sO$vxcUs+pT?9!@#oLJJhxJd&CdOXB^vfuo^zOlJo5eGCZD(O(pW0M1IJw
zbY#0w=tb6J+1dNtxYCzwK~Zl!-t|Ivwuo+b+0#8*^!+gvMgGXdf1+?$D+Jw4;-0w|
z)7Px=Ff+N+z&8e6GK%mnHRxPSs$HoK!iGcnfty5qK<ik4h%&Tc1KKB|`0U1Ve_z-I
z6qLtG-6MNJ$6&btAAc9DYI!h}qV-0-iHKd`hS7lK!%FhYG}YnzH{Y8>9w>u_qX73M
zfs49CbuZI<NufG)q}q?kxbS>-5ZD+{IJ3XFgDDW%jeLg%i0me$_ULHk3=FUZMm@zP
z2IAs_m}yqYu3RJ2%p^5PaTDT!)RKLg#ivLGQ#Hh0oCf?BXkYC0%wi<ZPY_@)ivXh^
zR+pW#g*TmsTdzab;fd>%b@$r!d}l1RDr`v?KO<F4VZfwxvf42k_$`~F&g0KD)i7f(
z#k510Dsh-5b`XUWM@JS?){FE**cD|yI=UCf@7`t!Z%+4DFoF`gis`f|@plhNoLX*1
z>M4V)^x~);ZSzXWWn>|?A-P;6Z8HbAGo}^!trwMKk<YZ~dp}aeUn-72Kh3|)5r>1X
zEJ3rvkNo94+NBdwv_fR^0|#$jN)iYn_e{@1QLbNL=1gU4lAIt#EG9N*x2^u5bZT>e
z7LU9sPs4BN)rGQnBI`jG@B0peu$U5+Ssl~pJ7%ahkKzZ(ii9LZxOkX6reyJTo|KC?
z!(Rhx#3K;o^SE@H`St5`#$<I;UHQPp5O`odX>K6AeCFj|?%Xx*@0#~q{g<pql^{c1
zw=O~^Wvh#qUp=uYj^|I511-I)dtBY7?l{UFFe<i#>~OX8!?m!dAQ7z9bARsgHFP-}
zx&aHeWcikJ#Db}S`f~YXL3iAdH?yZefHH~($4_*kT*i(MpB$GM(Bosqy0l!=c>pVQ
z=jm7K=j1h2OSST;mg;y=xy;dkCmc^m2<%a`i@E>nE_Cm!Kd{GN{ek`S>W_EyFRk&_
z-oNbbf4BD+T2HG^Nj#J(5c)yH=7@5*i>{h=k{ml=%V@flQfkJAkkek12J6DNppnyK
zlg`%UJxwo%%gxzhIq}4nk`I4oZHPJ%ryR1ZCMh|L%9--ml=H31r08CLVSIK}>e*9(
zbye2tnR9q`S&NDL2UA8`T`M>8@F)FO&#321$+*Hr2$z>QCN5cFGB#JdAAkiuxMN)E
ze_BQnT|jst_jlyrXFM+TKHf)=T1U&XOfhU2XFMM`uDcj4gQ=A5RCTN0)1{TO@rLI4
z=)d`WL{Y^U7Tl&GI054-ZS2M70L2b8rbDL9vH{VnYwZVR^Y#<(hV-^ArHH4ASq*gM
z*VM0CTu*Lpvb~RbIXjbO&Nut?R-L9RPC=%~Te^R}{y5xI$R+T<zD0N$I}!JHuspr)
zluMr83TrcIMe9!4$yM#T`_wjiU9r}1cY_lCfB);h|8FulnR=jC@Z=2vzT)%AL;uDl
z(u^f2y(lpBy(%+2io<oBRZtub?B|gJrD%cT?k+7-+^x9#0%ePog~g#1cZwBXWN|4_
zd~tVoU%V7&ao6kb?&W6g{>eioGfAE^`A$A@!gxeKF}@QmikC+B58IC3=_+ht@sXGO
zE$v5x3)i&(3)?D7^s#$Rb!L>o4nS<O=GCP4G6b0bn_kn?+DCUmLY;m>XoSeJQov)i
zS)yt9>3)xie)7544ss;BolUW`TG8RV8e$@ep_S#If=#m{G>jQovc7K|xa+4dud{y-
zQ#Ci3P1JQ#kFig8S~-u-6B?^}GthFdWz2QqGa8cgrA&hXdpK=up*N(Yx)!T{Liws-
zkpin&>km^I{!(#%mqs`2=#}%Zy>c645Ufb0EAI~LKCU<Gw&f|ThyU$mlhNJps>u;o
zq1q8h!(>sVw|@kaP)C>pXZxK1$boFU(%K%&r7J=#s!(_=zrQM~kFRN5GXA3(`$uId
z?>$A=Nwz#bNhZmQPn#Ts7VmLR{WH4)C1aE`tN2Bh)C*u@-nRr{cPrQ3_#{V=+3=$+
zF?O#c=BnagvRi7eR_3CM6sDh^E;7_iH=b_47N-eyzU6;s?cz(5?h03?dOX1LiD0Ph
zT=<MLnFb#lis*XJ5nqUU9O^3hnUDV)?C={50=r<@XuJdd7{P0HdUP6WubwhJfkJm(
zlE;}El_k~cUt&qHPWktzxeYP`0AwFkgj(It3H@7!?F$iZfvx<8-@Qi&sRvfbk7`?=
z^$40UNqOY?`b&S?9P|U(jyOwp%1IRD`!jGQRQQ^8Cc-DY<^y+?j5uC%(a3BGkIPU`
zJ<QB{RK;+@29VfG^6IF=S&rS<btcc_7s1woji5nFw`?@Z>%W37yDnT5-w1EH#P_k@
zHnJSj$KGBwMBMhNtrvOHDh>YOmL-dvR~gntH~x|%Zi0#fzW5+uF!uQ?tGHA+kJtE#
zxS1f1@^euZKk~C?q8Usg87i4nTP!UPHFUP+_3JPemgR#c1bE$ohn;?A4g6&Gf6dMU
zJ!ex>)Hl5Mp3$ZwC{!fqE;0NK*%arl|4$Tb!(d}yq;nhUt2*syYWVvRdsWv;m#rk~
z?eC02SwVmSDqSM;3>pH~O{W4;5;?TD+BhSl$gfe7z(EC}i>YlNgnV~m9>s@|(7f?O
zx|mYZa~3x!il*+XM>-bUdh&nNIA8T#cP^KYxvo6MPvNT%iZdgfyrp;YSM5YXWuGxY
zK^?E7Ya<qVMZbe{S(c3O-Y4=eI=p=9*XIfi|C>8Y!Br=kbrblQpSud?@24tr_gbtK
z314Mi6WlcZx8}w!AGWA(*^b`lsd70lY~0o0%?0`(gtxKl4y2yZG0sKDEPLGX2K4i{
z{;jTM;x$L;)QI|Us{u#Bm7X0DjPt}*U-=-tXx)^p6zSLn3H1yp5}r?0g~(jnP|0!b
zOhZP+Y6H2fC(ylFe4xeznkyi2&^T7H3>$#Xi`1~rKg{N;C^LSjSj*ODWujGPNX4ws
zrIq<MsGVMbY{Q-dmP(&4sBP3i)?+wNDk|&AeZy)W|BGMmT`K(k@7L~9QAb?7a(xVN
z&(}JIc_%mintR#ZUqTXY#;XjTi9_!=E`Xmg-Tq1!&%l2jn}LAkt_lVUZZ#|qOZO>F
ze`(vK&Eqg6-B+cxl&Dx7U*{zbmwe@k9h{Le>8Ec-Mc8Gkh{Vx=6-$L9#%>sB%<kT)
zLAg-HiXxSa{FjP1`10bKae+6lG$`8B@4W^J09gROrpf{EVVJvA(h@^9h3<8s?+<He
zl}%Ahc*<bTlDcgaKZ00VvA{a#rQ+wxcBVx4$>Ztx#T1hs#8A5@xDPD8#ao@XodXQ1
zi(m23$DDx&KLXj#<)u^Wei+YaeY4KUvnzaVc4F23A;FVx^st*e&5ijD4f{|I5P$SX
zOLEqf#<^RBu}Q8QmIyhPQ5aOh^Q#r`{E`r<m7*Sl^Bytw&gecmzL$P6c1U}{G19@!
zHMA?u|6DdyWN57fyy=JOn#>k2Fk5Gcjuo2>)-|wJAUjwd7N;8a5z-aFH1%x%_QmF+
z8eGxc&SlcGwSt<UI+N7fa7j?vg#OCj=z$<^N1rlg4g^kV&O%lftnVB#3Eu`?onQXd
z<{-Ud!nr?xwXoG*FlU}cYi&N`$g@wL#ByuV%J?k%?FR*K@DfvMfoT_p=z5SRfK<Iv
zS7Lftf<U3*b3<uF2e6c4zb1iMBa%5C`wk_Y92_aJV0ep`1fwQYn<9Tfn|%);^i4m*
z+?!#C==Q9JMzD@<vqSA`XCxx)wd0-!*^D*VhcqeI*$8#iUlkq<QR5^eZZWe@y!$Ty
zX_$=JszOmj9Co}d%BJ9XFt?w3UhT!CfhT?l867<>#(TYq`>8}njI1)G4;v)FTlrX$
zUUyt)CmBdnxZK0KiInVWKY#U4pPaTbnt9u$p=<*r)FGE-dWsG&FM<cL3RW&T@WbnB
zMFy|5Z#bVX>u*NH2lb$%_x<YDTKRi0ku*KqX#<v8>g>P+p#E8jU*7}Z4oUCHnOoB9
z^g?G<QAF~c#<=Dt1C;jalL{hb*Ee>!Zh6bvYNa03vTF>@-x)j*g;viUHaw`$98=ai
zTvx1V*Xi#5Ds|P3^NB6pjgGr-Q(qu&_82)>M97v&eqGcb5I<UsDO%lw!R=r3eqdiJ
zP*vt_5Zof-?&b=94d!Z<@Jn+iSIsNpX556M6>+;_Gs>~G_uS6-yji+Tdo}iPHnW}^
z@c{xb4L6Dc=qg?S0ji##d$fnwhQpvr!yQoWruX`}Z{r3V$Pc(x{5tqV4k)ic_7OI9
zBIRNBR7-7PbM|-+%fc>jM88OB2Ij{^wzeY`J3OW*^0AITWE=+##Tux-*eL`ksS@Z(
z>R3&Oa*6SX?grGC%o`62CO%oHMrT>l*_lyNPk2%rc<ZBVmPme;n%cCgK#)LAu-ez_
z-paWVyVg~i<W#AcG*ih|X4jX)<2At0@SDTwkW~1$lMl&SIGBRD#<~;QW)mTpw`#-<
zdfdNgxPp=T$ze5ATs@?Ea~|<~vhcB^Wjt@{r6eVd4zG67TzezsYC+Z&I~S%N+H3Q=
z-y=MIkvvtiaS@LYt~BhFL<RQp_ustJ7cL>sZXAR>qLXg!#+EaNsvX+j`{U5j%aLz^
zsRb-?AFZ34+wDjlH=|VN*CAi5yGG7$P2&EZ4Pfb{N0nR}9>k}>nI@K(Pw*bb#<f~(
zaKghk=&zQ!%GSx7^k1qLK%VLODa(io%lG<g?MvBXnq{p|IIU0B;*PMR&D`z!Sjw_3
z{)~C8fqf%{LJPQM;|_bdP2d&jii~C*iJP!K5W@794RPj^g>h|Sa0cz(eyzXHTRk;R
zJuaVMy2l=4`Bte<=GVA(W+roTp`0?1tyS`4zrQv>?^__}`3}<yrvOq71a8*g`8UW^
zFf7*IJ$+2JY@Iajw^oago5EOsZteWGM7E5Oh2#MqOIT^KN9!xP(O%xRuDSG_APfeN
z`d?q59CkNmr%-v9_gvnyn40{vCNRhBc~`K*l&iTc_3(Yi=u@AsPul`ZncdEnnbI0S
zWNuI7O}y2sULFB8cR!wx8H&Kf(>WZEB~$^5EotX?LMrB8RU6mQ>d7$MRbAG6aVB3o
zP9ly^737INmnC;~g{?+_aTCjA=8kb#$Qnv~hKVDJ9r3oGMusL>ImVU)WN*%qO|PE{
zFZhF^ZSSgaIGu)6vCHVgSL~+aD^()a)WRwErTF=0v2thx*;k`39-#%~AUja6t7xSN
z{I>1Na14&2UxsF9kCi}vFi27)GNHvHP*x;Nq11v={*q3v1o<=*f@&P7LiV_!;VgV>
zD$BfIY0T`R`2qK;G1A?b)$)?+7xH%*b4<3{oKl<B#R_+qu>F(N*nm%2`-z9=XY()+
z-M!I*n>@Wh+VP?vl7X+;W!+c-LO!<=p(ta%pQLM8we-O^JMccsE84oY`qu1~kp#KK
z!>Is>4B0~ws<2LFa=kgVctA<jtl#0#GH;o`O(`h4<y_n{-nK+iLAAm7ySTSbY|n*3
z^k_Y{@-fO@Bj3I{K>j(1-x*DXjBI#%bOO0>0r<?@5>2DgDUn4>=5h=-AN=3i>)Rz?
zA=8lWZg#t0EUDJx3=f`ptJ?0`sZyypbB+Rvaji9VtMw)~?{QzMtUiKZC-z66IG0SW
zrK-3Ktsdq$B_FfhUHH%)3opK=tI@0`ZOh9m#Nte%S>kb@!|VKO{G<uW)*@$7H;uMa
ztUI}$j9-l4sAEyjFcKAUq-|F@g+}29ac^)?CtkgDg>B8A{a`w5iNyCXR9`K=PhCyr
zRXBCs)V~jQ2zn(zhRh=C5}!%Ki^awP;XtXiixbC%cyyOugLqfy-+fKVhCe4ebPNDO
zxL1Ug0?rS(pLw(JYbm~0BQa<L6|{&FLnN1N9J6k>xzOvkIt@eq$=?AA9?`>0aX2H1
znP|<xSgl(ji{P)U1qo(EPQuAEt|<PwY#hbYd8H2kg>5Gn)aIM&rEXRwCbPy82_hmL
z)GG13^y+W4e?VUK3Zfh&c(UI|KomtPO#(RLf{>${*6Bp(?q3KdMIB@9dnE%tJI+6$
z^1}|0qEFK8&ybO`yN4!b{W_gJIbYxAwDP1Gy;QQy_x9|Xw4uRL4+Jnz-Y}-nc0+@S
zM*g=3=2lI_&tb$%GJ7h^#S^HQqV6n#2&dM=z}%|2TvlezGIB-(HgclA!8P%_0$#nX
zcnfw%?ZR)3#CS7LAp<?aMSQrAONyTLofPEblz<ybkyWVisQ$x5F^#RBKc?csakTu7
zsp1s9kGm7^S>EBc6OEx*#5$i_=gFV$B4ZmLYa{>gw9qOYFW$`io?tS_siRY;(zIQ8
z<O9g!*pdx$GW)XSPdlu*2obFu#D%25IYI5&!jRny95+f7qfJMyEI5s6d||z3AroDN
zq5?tQ2aj2wn|+L%H@Tt$lJ67>NIhqtD<jcGM!x2t8e)RQ@UKsifIaBofpM1>E1uT%
z1a&(BW3IBP-WLn+t#`8N^sMMGPbvB{kPeD~a+~gQ*+K%}YKN1eN~<UBPObiKq5WrI
zxiM7L((vv<EvaIF(ndWop&ZerICCXB`FW4P=Pl!D>b~?~Km}k!Yc7K8c0pA79(;^A
zG&JpC(eeNDa-?RKsZkj>@pn1yx+i1kMvngSeyfgzKsw?SfT#R5n_^c2E$DD)4y`Jr
z!!mb`gdw|alRnmRz?MOf0TXxS`R0<wG_+gC6Ztt>lt%i4`3E7;%K{x-EW6TB&@nV%
zd}3lG{1$``XD1q)`@2=UBcPi0)PEDgJ=xmu8c`9!5rD`2c;&d_D%z~xoH#ywa&|<?
zao4t&AF$iBo;n~elrPn5LA}rNg_A67XpqRW{z!^Q;;nErf4i5fv1!EDc*m*gL7TK{
z+#=me7mjKt<m;f4jDn`L=vcaZ<uM!?0J08vsirh9Z}#Ym8v;XN2hD(Hy^XI5)p#Yt
z+ACMXz=FY)d$N?{Z}81H+617Jp!mL02sYb}AbS(A*2TRj+z@PwYkt)<N!xGw8T0Y}
z>d;U1P70O-45qU4qcGv(<oSJd`&1Ih1M$!47N>CWo&Pe)sr)A~%Zk&(GQcDyII-a#
zZp%hDU2IxwM;=3C)^nzl0F_&nph$tt(>RsCfEEd&CTcAsxB@1^s2tG-u|UdM36JRg
zZgG|TB2vBu<niYkC9Nw?hAN8Y7F{nU<3aT2k45Iwe*}VxIaJbFp8$)I&3O=8R)a>?
zp)a?u%`_FI{xrnY|KQ#g2@7E5xL38oI67^a`J-QE%|~o&?5frxe09<3nUXJtJ{L_U
z(S|czVbKwxZMqiX)pub_XfA&`1f)|n9BpQID4UvUX7_@P5i9sv)7mDd3?>|)=VQ>_
zsDJNhT32;9%W|#{3SlQGXxQ{19@(75s$AXB%`mf?9dw-FnTjSCkmU4xq>D!Jm$-Y&
zAOd)D>hzDlD6tRc#$2h6`o-DD-!DNO8PxX!dzEiZ_;9ReFiZUmvnc8g6G$ux7!SOC
zc>=$L`{eW_3`_Y{4GH}8EAK<v3(Y&Kbnl|t4Q6#R+dPTF#l<tUe<_&@I2K0gK>gMq
z7V_|6*JW4nIb>2%l5$b9i1b0}M%4P6i(j!P{;6**I~1eaouoCKKW_y~)*E!9cpp`j
zZHOw}Roy0xAUqO0eS_BFUNd-oz`30Ez?b2}A2*SM4iDC(-oXgdq|P={M*<K72q+sp
z<o<}lel3$WZlXZ?q_GCC5cnrp{kxZ!(E{oBD&dV0@3~QULZ0cJ_3D030yVYw`rcmd
z;{zFqjW%LS4>y=8KH>r`^Obr|wpfEAKXJEWs)B+xm|#{Y=q2`;JaHi_HyA=wS%JmT
z3j^G{Ym33>t!P4gIeNt#5;Eq4AN=qh*{Zc-LPCB#NAMZ3kktEXv1p>Y{=3q6cL3!~
z6n8k4LeMMVozWQc`XLLYKdTQ#v}@(T>C5M5X3&7BC|@M2`$NpxFB)Ac{mUPek-Ue}
z);<X!>0D3<MT>=u74kXv{yVB#%B3Jr#t!az?4hTq9pc`NO#sB4J~ujwK{CC%_9gBF
zAd9ZJ9GWYZ2R?m{xTY2;JaU|r>VNlE_c2Hz8~vz=C{QT(7Ju)UZWm6_ciIA8f&JO=
zTofjB0@MqZ67-XC4BUN}uAOGm6H+?7{YfhU-keRBooSyO{?r^d$H0kB+3tA!@SnKS
zN>Vx#`##2=8?r~F{;CNi5Ujcy4ZpB`KC78Hx_!5-JVu2d>Y8o*kjIksj}M7y9PYS#
z%y7|<gteT#%Z8QQ`)Tq78Ig-Rlc1xwVYrEri*x;CtXk`#)EB9V_UDH!SfBHy5D4?}
zP~Y<(nQK8^$l|+;n^%(!sNt&=xMng?e8b)8fTUC81MKqd_HtKRcE=n;p=q)3X@cqB
zgz@{7Ld!altBic;?pI&>cJS}2UM(e@!w3MX!^{2ha<)#SRSgwXqf1`Pvi@Xt{lV;K
zlB0*xKY*>QAD@*JB>*J}eJm4sqqUTy9=R4WV}{+FoMvvlzmsWNmqJ3ilnzolpPMI$
zPnfXzSb%_mJA&u=?AuLgVx6{?z~rvTirgRoNj?B`Pnwr-Yh5x0wlmfqgegDDmZ!M=
zX0lO+$kF|hYrAWIO7O$5KDC*Oo|V+hr(D~@sal^|&=(lzT!5GxC(XMN>7E*j58fIb
zSwl9&OGLKdOBrFZ;OvyVT-W)<Vy|pv{&2fvJ-9S#8A?4EN$;d~UHQAdZA?~@?Yxda
zX|jW^{g^`CtU_H@sTKm154RUAEf*|((v3L)Qp_3EYEji`L5siY3N8OSPLDY#jX9`T
z|Mf8pV+^JTx4sB6<W4(4y>mA8c(<Kf%ptjI8V{<T;<Cy&(Bk%PPFDcu*p5DAXXKP+
zc9Y*SJS54q4FK>JcCkf*L(|E5v1N{oV$_FsdT2vH>Oc4e;da5=IVq)Soem6<Qyfi{
zc=%IkOt{}~Waf_--_jBF66~7KswdTEYHmo0DP2KU<p0=D8!W#$p=GWWq?R-mK1`)@
zN+TYL@W2oYdwG`BR6#}|Li(Snvj0F^NXSUE|Al|{KQLzh?;-y`RM&s4|7XbQKVa?u
X1MbpPK|}wq1m&NH{ENE!|7HIRt=yy$

literal 0
HcmV?d00001

diff --git a/Solutions/Vectra XDR/Package/createUiDefinition.json b/Solutions/Vectra XDR/Package/createUiDefinition.json
index 3986e24b80..c807783b6c 100644
--- a/Solutions/Vectra XDR/Package/createUiDefinition.json	
+++ b/Solutions/Vectra XDR/Package/createUiDefinition.json	
@@ -6,7 +6,7 @@
     "config": {
       "isWizard": false,
       "basics": {
-        "description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/AIVectraDetect.svg\" width=\"75px\" height=\"75px\">\n\n**Note:** _There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing._\n\nVectra AI is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. Vectra AI's cloud-native platform - powered by our patented Attack Signal Intelligence- provide security teams with unified threat visibility, context and control across public cloud, SaaS, identity and data center networks in a prioritized feed. Vectra AI-driven Attack Signal IntelligenceTM, empowers SOC analysts to rapidly prioritize, investigate and respond to the most urgent cyber-attacks in their hybrid cloud environment. Organizations worldwide rely on Vectra AI's cloud-native platform and MDR services to see and stop attacks from becoming breaches. The Vectra AI App enables the security operations team to consume the industry's richest threat signals spanning public cloud, SaaS, identity and data center networks inside of Microsoft Sentinel. For more information, visit www.vectra.ai.\n\n The Vectra XDR App for Microsoft Sentinel contains:\n Data Connector to ingest events generated by Vectra XDR (through OMS agent).\n Workbook: Dynamic dashboard view of Entities, Detections, Lockdown, Audit and, Health\n\n**Data Connectors:** 1, **Parsers:** 5, **Workbooks:** 1, **Analytic Rules:** 2\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
+        "description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/AIVectraDetect.svg\" width=\"75px\" height=\"75px\">\n\n**Note:** Please refer to the following before installing the solution: \n\n• Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Vectra%20XDR/ReleaseNotes.md)\n\n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\nVectra AI is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. Vectra AI's cloud-native platform - powered by our patented Attack Signal Intelligence- provide security teams with unified threat visibility, context and control across public cloud, SaaS, identity and data center networks in a prioritized feed. Vectra AI-driven Attack Signal IntelligenceTM, empowers SOC analysts to rapidly prioritize, investigate and respond to the most urgent cyber-attacks in their hybrid cloud environment. Organizations worldwide rely on Vectra AI's cloud-native platform and MDR services to see and stop attacks from becoming breaches. The Vectra AI App enables the security operations team to consume the industry's richest threat signals spanning public cloud, SaaS, identity and data center networks inside of Microsoft Sentinel. For more information, visit www.vectra.ai.\n\n The Vectra XDR App for Microsoft Sentinel contains:\n Data Connector to ingest events generated by Vectra XDR (through OMS agent).\n Workbook: Dynamic dashboard view of Entities, Detections, Lockdown, Audit and, Health\n\n**Data Connectors:** 1, **Parsers:** 5, **Workbooks:** 1, **Analytic Rules:** 2\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
         "subscription": {
           "resourceProviders": [
             "Microsoft.OperationsManagement/solutions",
diff --git a/Solutions/Vectra XDR/Package/mainTemplate.json b/Solutions/Vectra XDR/Package/mainTemplate.json
index 87b950eeb2..a703f97b3c 100644
--- a/Solutions/Vectra XDR/Package/mainTemplate.json	
+++ b/Solutions/Vectra XDR/Package/mainTemplate.json	
@@ -41,7 +41,7 @@
     "email": "tme@vetcra.ai",
     "_email": "[variables('email')]",
     "_solutionName": "Vectra XDR",
-    "_solutionVersion": "3.1.0",
+    "_solutionVersion": "3.1.1",
     "solutionId": "vectraaiinc.vectra-xdr-for-microsoft-sentinel",
     "_solutionId": "[variables('solutionId')]",
     "uiConfigId1": "VectraXDR",
@@ -89,11 +89,11 @@
       "parserContentId5": "VectraLockdown-Parser"
     },
     "analyticRuleObject1": {
-      "analyticRuleVersion1": "1.0.0",
+      "analyticRuleVersion1": "1.0.1",
       "_analyticRulecontentId1": "065c0a50-3080-4f9a-acca-1fe6fbf63205",
       "analyticRuleId1": "[resourceId('Microsoft.SecurityInsights/AlertRuleTemplates', '065c0a50-3080-4f9a-acca-1fe6fbf63205')]",
       "analyticRuleTemplateSpecName1": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('065c0a50-3080-4f9a-acca-1fe6fbf63205')))]",
-      "_analyticRulecontentProductId1": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','065c0a50-3080-4f9a-acca-1fe6fbf63205','-', '1.0.0')))]"
+      "_analyticRulecontentProductId1": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','065c0a50-3080-4f9a-acca-1fe6fbf63205','-', '1.0.1')))]"
     },
     "analyticRuleObject2": {
       "analyticRuleVersion2": "1.0.0",
@@ -121,7 +121,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "Vectra XDR data connector with template version 3.1.0",
+        "description": "Vectra XDR data connector with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('dataConnectorVersion1')]",
@@ -624,7 +624,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "VectraDetections Data Parser with template version 3.1.0",
+        "description": "VectraDetections Data Parser with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('parserObject1').parserVersion1]",
@@ -638,7 +638,7 @@
               "location": "[parameters('workspace-location')]",
               "properties": {
                 "eTag": "*",
-                "displayName": "Parser for VectraDetections",
+                "displayName": "VectraDetections",
                 "category": "Microsoft Sentinel Parser",
                 "functionAlias": "VectraDetections",
                 "query": "let VectraDetections_view  = view () { \n    Detections_Data_CL\n    | extend \n        EventVendor=\"VectraDetections\",\n        EventProduct=\"VectraDetections\",\n        ID = column_ifexists('id_d', ''),\n        [\"Detection Category\"] = column_ifexists('Category', ''),\n        [\"Is Triaged\"] = column_ifexists('triaged_b', ''),\n        [\"Detection Name\"] = column_ifexists('detection_type_s', ''),\n        [\"D Type Vname\"] = column_ifexists('d_type_vname_s', ''),\n        [\"Detection ID\"] = column_ifexists('detection_id_d', ''),\n        [\"Vectra Pivot\"] = column_ifexists('detection_href_s', ''),\n        [\"Entity ID\"] = toint(column_ifexists('entity_id_d', '')),\n        URL = column_ifexists('url_s', ''),\n        [\"Entity UID\"] = column_ifexists('entity_uid_s', ''),\n        [\"Last Updated\"] = column_ifexists('event_timestamp_t', ''),\n        [\"Details\"] = column_ifexists('detail_s', ''),\n        Severity = column_ifexists('Severity', ''),\n        [\"Source IP\"] = column_ifexists('src_ip_s', ''),\n        [\"Detection Details\"] = column_ifexists('d_detection_details_s', ''),\n        [\"Normal Domains\"] = column_ifexists('normal_domains_s', ''),\n        [\"Is Targeting Key Asset\"] = column_ifexists('is_targeting_key_asset_s', ''),\n        [\"Source Host\"] = column_ifexists('src_host_s', ''),\n        Summary = column_ifexists('summary_s', ''),\n        [\"Grouped Details\"] = column_ifexists('grouped_details_s', '')\n    | extend \n        [\"Vectra Pivot\"] = case(isnotempty(['Vectra Pivot']), strcat(['Vectra Pivot'], \"&pivot=Vectra-Sentinel-1.0.0\"), ['Vectra Pivot']),\n        URL = case(isnotempty(URL), strcat(URL, \"?pivot=Vectra-Sentinel-1.0.0\"), URL)\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        [\"Detection Category\"],\n        [\"Is Triaged\"],\n        [\"Detection Name\"],\n        [\"D Type Vname\"],\n        [\"Detection ID\"],\n        [\"Vectra Pivot\"],\n        [\"Entity ID\"],\n        URL,\n        [\"Entity UID\"],\n        [\"Last Updated\"],\n        [\"Details\"],\n        Severity,\n        [\"Source IP\"],\n        [\"Detection Details\"],\n        [\"Normal Domains\"],\n        [\"Is Targeting Key Asset\"],\n        [\"Source Host\"],\n        Summary,\n        [\"Grouped Details\"]\n};\nVectraDetections_view\n",
@@ -660,7 +660,7 @@
                 "[variables('parserObject1')._parserId1]"
               ],
               "properties": {
-                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraDetections')]",
+                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraDetections')]",
                 "contentId": "[variables('parserObject1').parserContentId1]",
                 "kind": "Parser",
                 "version": "[variables('parserObject1').parserVersion1]",
@@ -690,7 +690,7 @@
         "contentSchemaVersion": "3.0.0",
         "contentId": "[variables('parserObject1').parserContentId1]",
         "contentKind": "Parser",
-        "displayName": "Parser for VectraDetections",
+        "displayName": "VectraDetections",
         "contentProductId": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject1').parserContentId1,'-', '1.0.0')))]",
         "id": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject1').parserContentId1,'-', '1.0.0')))]",
         "version": "[variables('parserObject1').parserVersion1]"
@@ -703,7 +703,7 @@
       "location": "[parameters('workspace-location')]",
       "properties": {
         "eTag": "*",
-        "displayName": "Parser for VectraDetections",
+        "displayName": "VectraDetections",
         "category": "Microsoft Sentinel Parser",
         "functionAlias": "VectraDetections",
         "query": "let VectraDetections_view  = view () { \n    Detections_Data_CL\n    | extend \n        EventVendor=\"VectraDetections\",\n        EventProduct=\"VectraDetections\",\n        ID = column_ifexists('id_d', ''),\n        [\"Detection Category\"] = column_ifexists('Category', ''),\n        [\"Is Triaged\"] = column_ifexists('triaged_b', ''),\n        [\"Detection Name\"] = column_ifexists('detection_type_s', ''),\n        [\"D Type Vname\"] = column_ifexists('d_type_vname_s', ''),\n        [\"Detection ID\"] = column_ifexists('detection_id_d', ''),\n        [\"Vectra Pivot\"] = column_ifexists('detection_href_s', ''),\n        [\"Entity ID\"] = toint(column_ifexists('entity_id_d', '')),\n        URL = column_ifexists('url_s', ''),\n        [\"Entity UID\"] = column_ifexists('entity_uid_s', ''),\n        [\"Last Updated\"] = column_ifexists('event_timestamp_t', ''),\n        [\"Details\"] = column_ifexists('detail_s', ''),\n        Severity = column_ifexists('Severity', ''),\n        [\"Source IP\"] = column_ifexists('src_ip_s', ''),\n        [\"Detection Details\"] = column_ifexists('d_detection_details_s', ''),\n        [\"Normal Domains\"] = column_ifexists('normal_domains_s', ''),\n        [\"Is Targeting Key Asset\"] = column_ifexists('is_targeting_key_asset_s', ''),\n        [\"Source Host\"] = column_ifexists('src_host_s', ''),\n        Summary = column_ifexists('summary_s', ''),\n        [\"Grouped Details\"] = column_ifexists('grouped_details_s', '')\n    | extend \n        [\"Vectra Pivot\"] = case(isnotempty(['Vectra Pivot']), strcat(['Vectra Pivot'], \"&pivot=Vectra-Sentinel-1.0.0\"), ['Vectra Pivot']),\n        URL = case(isnotempty(URL), strcat(URL, \"?pivot=Vectra-Sentinel-1.0.0\"), URL)\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        [\"Detection Category\"],\n        [\"Is Triaged\"],\n        [\"Detection Name\"],\n        [\"D Type Vname\"],\n        [\"Detection ID\"],\n        [\"Vectra Pivot\"],\n        [\"Entity ID\"],\n        URL,\n        [\"Entity UID\"],\n        [\"Last Updated\"],\n        [\"Details\"],\n        Severity,\n        [\"Source IP\"],\n        [\"Detection Details\"],\n        [\"Normal Domains\"],\n        [\"Is Targeting Key Asset\"],\n        [\"Source Host\"],\n        Summary,\n        [\"Grouped Details\"]\n};\nVectraDetections_view\n",
@@ -726,7 +726,7 @@
         "[variables('parserObject1')._parserId1]"
       ],
       "properties": {
-        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraDetections')]",
+        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraDetections')]",
         "contentId": "[variables('parserObject1').parserContentId1]",
         "kind": "Parser",
         "version": "[variables('parserObject1').parserVersion1]",
@@ -756,7 +756,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "VectraAudits Data Parser with template version 3.1.0",
+        "description": "VectraAudits Data Parser with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('parserObject2').parserVersion2]",
@@ -770,7 +770,7 @@
               "location": "[parameters('workspace-location')]",
               "properties": {
                 "eTag": "*",
-                "displayName": "Parser for VectraAudits",
+                "displayName": "VectraAudits",
                 "category": "Microsoft Sentinel Parser",
                 "functionAlias": "VectraAudits",
                 "query": "let VectraAudits_view  = view () { \n    Audits_Data_CL\n    | extend \n        EventVendor=\"VectraAudits\",\n        EventProduct=\"VectraAudits\",\n        ID = column_ifexists('id_d', ''),\n        [\"User ID\"] = column_ifexists('user_id_d', ''),\n        Username = column_ifexists('username_s', ''),\n        [\"User Type\"] = column_ifexists('user_type_s', ''),\n        [\"User Role\"] = column_ifexists('user_role_s', ''),\n        Version = column_ifexists('version_s', ''),\n        [\"Source IP\"] = column_ifexists('source_ip_s', ''),\n        [\"Event Timestamp\"] = column_ifexists('event_timestamp_t', ''),\n        Message = column_ifexists('Message', ''),\n        Status = column_ifexists('result_status_s', ''),\n        [\"Event Data\"] = column_ifexists('event_data_s', ''),\n        [\"Event Object\"] = column_ifexists('event_object_s', ''),\n        [\"Event Action\"] = column_ifexists('event_action_s', ''),\n        [\"API Client ID\"] = column_ifexists('api_client_id_g', '')\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        ['User ID'],\n        Username,\n        ['User Type'],\n        [\"User Role\"],\n        Version,\n        ['Source IP'],\n        ['Event Timestamp'],\n        Message,\n        Status,\n        [\"Event Data\"],\n        ['Event Object'],\n        ['Event Action'],\n        ['API Client ID']\n};\nVectraAudits_view\n",
@@ -792,7 +792,7 @@
                 "[variables('parserObject2')._parserId2]"
               ],
               "properties": {
-                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraAudits')]",
+                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraAudits')]",
                 "contentId": "[variables('parserObject2').parserContentId2]",
                 "kind": "Parser",
                 "version": "[variables('parserObject2').parserVersion2]",
@@ -822,7 +822,7 @@
         "contentSchemaVersion": "3.0.0",
         "contentId": "[variables('parserObject2').parserContentId2]",
         "contentKind": "Parser",
-        "displayName": "Parser for VectraAudits",
+        "displayName": "VectraAudits",
         "contentProductId": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject2').parserContentId2,'-', '1.0.0')))]",
         "id": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject2').parserContentId2,'-', '1.0.0')))]",
         "version": "[variables('parserObject2').parserVersion2]"
@@ -835,7 +835,7 @@
       "location": "[parameters('workspace-location')]",
       "properties": {
         "eTag": "*",
-        "displayName": "Parser for VectraAudits",
+        "displayName": "VectraAudits",
         "category": "Microsoft Sentinel Parser",
         "functionAlias": "VectraAudits",
         "query": "let VectraAudits_view  = view () { \n    Audits_Data_CL\n    | extend \n        EventVendor=\"VectraAudits\",\n        EventProduct=\"VectraAudits\",\n        ID = column_ifexists('id_d', ''),\n        [\"User ID\"] = column_ifexists('user_id_d', ''),\n        Username = column_ifexists('username_s', ''),\n        [\"User Type\"] = column_ifexists('user_type_s', ''),\n        [\"User Role\"] = column_ifexists('user_role_s', ''),\n        Version = column_ifexists('version_s', ''),\n        [\"Source IP\"] = column_ifexists('source_ip_s', ''),\n        [\"Event Timestamp\"] = column_ifexists('event_timestamp_t', ''),\n        Message = column_ifexists('Message', ''),\n        Status = column_ifexists('result_status_s', ''),\n        [\"Event Data\"] = column_ifexists('event_data_s', ''),\n        [\"Event Object\"] = column_ifexists('event_object_s', ''),\n        [\"Event Action\"] = column_ifexists('event_action_s', ''),\n        [\"API Client ID\"] = column_ifexists('api_client_id_g', '')\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        ['User ID'],\n        Username,\n        ['User Type'],\n        [\"User Role\"],\n        Version,\n        ['Source IP'],\n        ['Event Timestamp'],\n        Message,\n        Status,\n        [\"Event Data\"],\n        ['Event Object'],\n        ['Event Action'],\n        ['API Client ID']\n};\nVectraAudits_view\n",
@@ -858,7 +858,7 @@
         "[variables('parserObject2')._parserId2]"
       ],
       "properties": {
-        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraAudits')]",
+        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraAudits')]",
         "contentId": "[variables('parserObject2').parserContentId2]",
         "kind": "Parser",
         "version": "[variables('parserObject2').parserVersion2]",
@@ -888,7 +888,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "VectraEntityScoring Data Parser with template version 3.1.0",
+        "description": "VectraEntityScoring Data Parser with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('parserObject3').parserVersion3]",
@@ -902,7 +902,7 @@
               "location": "[parameters('workspace-location')]",
               "properties": {
                 "eTag": "*",
-                "displayName": "Parser for VectraEntityScoring",
+                "displayName": "VectraEntityScoring",
                 "category": "Microsoft Sentinel Parser",
                 "functionAlias": "VectraEntityScoring",
                 "query": "let VectraEntityScoring_view  = view () { \n    Entity_Scoring_Data_CL\n    | extend \n        EventVendor=\"VectraEntityScoring\",\n        EventProduct=\"VectraEntityScoring\",\n        ID = column_ifexists('id_d', ''),\n        [\"Entity ID\"] = column_ifexists('entity_id_d', ''),\n        [\"Active Detection Types\"] = column_ifexists('active_detection_types_s', ''),\n        [\"Breadth Contrib\"] = column_ifexists('breadth_contrib_d', ''),\n        Category = column_ifexists('Category', ''),\n        Importance = column_ifexists('importance_d', ''),\n        Type = column_ifexists('type_s', ''),\n        [\"Last Updated\"] = column_ifexists('event_timestamp_t', ''),\n        [\"Is Prioritized\"] = column_ifexists('is_prioritized_b', ''),\n        [\"Last Detection ID\"] = column_ifexists('last_detection_id_d', ''),\n        [\"Last Detection Type\"] = column_ifexists('last_detection_type_s', ''),\n        [\"Last Detection URL\"] = column_ifexists('last_detection_url_s', ''),\n        [\"Last Detection\"] = column_ifexists('last_detection_s', ''),\n        Name = column_ifexists('name_s', ''),\n        Severity = column_ifexists('severity_s', ''),\n        [\"Urgency Score\"] = column_ifexists('urgency_score_d', ''),\n        [\"Vectra Pivot\"] = column_ifexists('url_s', ''),\n        Velocity = column_ifexists('velocity_contrib_d', ''),\n        [\"Attack Rating\"] =  column_ifexists('attack_rating_d', '')\n    | extend [\"Vectra Pivot\"] = case(isnotempty(['Vectra Pivot']), strcat(['Vectra Pivot'], \"?pivot=Vectra-Sentinel-1.0.0\"), ['Vectra Pivot'])\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        [\"Entity ID\"],\n        Name,\n        Importance,\n        Type,\n        [\"Is Prioritized\"],\n        Severity,\n        [\"Urgency Score\"],\n        [\"Vectra Pivot\"],\n        Category,\n        [\"Last Detection URL\"],\n        [\"Last Detection Type\"],\n        [\"Last Detection ID\"],\n        [\"Last Detection\"],\n        [\"Active Detection Types\"],\n        [\"Last Updated\"],\n        [\"Breadth Contrib\"],\n        Velocity,\n        [\"Attack Rating\"]\n};\nVectraEntityScoring_view\n",
@@ -924,7 +924,7 @@
                 "[variables('parserObject3')._parserId3]"
               ],
               "properties": {
-                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraEntityScoring')]",
+                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraEntityScoring')]",
                 "contentId": "[variables('parserObject3').parserContentId3]",
                 "kind": "Parser",
                 "version": "[variables('parserObject3').parserVersion3]",
@@ -954,7 +954,7 @@
         "contentSchemaVersion": "3.0.0",
         "contentId": "[variables('parserObject3').parserContentId3]",
         "contentKind": "Parser",
-        "displayName": "Parser for VectraEntityScoring",
+        "displayName": "VectraEntityScoring",
         "contentProductId": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject3').parserContentId3,'-', '1.0.0')))]",
         "id": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject3').parserContentId3,'-', '1.0.0')))]",
         "version": "[variables('parserObject3').parserVersion3]"
@@ -967,7 +967,7 @@
       "location": "[parameters('workspace-location')]",
       "properties": {
         "eTag": "*",
-        "displayName": "Parser for VectraEntityScoring",
+        "displayName": "VectraEntityScoring",
         "category": "Microsoft Sentinel Parser",
         "functionAlias": "VectraEntityScoring",
         "query": "let VectraEntityScoring_view  = view () { \n    Entity_Scoring_Data_CL\n    | extend \n        EventVendor=\"VectraEntityScoring\",\n        EventProduct=\"VectraEntityScoring\",\n        ID = column_ifexists('id_d', ''),\n        [\"Entity ID\"] = column_ifexists('entity_id_d', ''),\n        [\"Active Detection Types\"] = column_ifexists('active_detection_types_s', ''),\n        [\"Breadth Contrib\"] = column_ifexists('breadth_contrib_d', ''),\n        Category = column_ifexists('Category', ''),\n        Importance = column_ifexists('importance_d', ''),\n        Type = column_ifexists('type_s', ''),\n        [\"Last Updated\"] = column_ifexists('event_timestamp_t', ''),\n        [\"Is Prioritized\"] = column_ifexists('is_prioritized_b', ''),\n        [\"Last Detection ID\"] = column_ifexists('last_detection_id_d', ''),\n        [\"Last Detection Type\"] = column_ifexists('last_detection_type_s', ''),\n        [\"Last Detection URL\"] = column_ifexists('last_detection_url_s', ''),\n        [\"Last Detection\"] = column_ifexists('last_detection_s', ''),\n        Name = column_ifexists('name_s', ''),\n        Severity = column_ifexists('severity_s', ''),\n        [\"Urgency Score\"] = column_ifexists('urgency_score_d', ''),\n        [\"Vectra Pivot\"] = column_ifexists('url_s', ''),\n        Velocity = column_ifexists('velocity_contrib_d', ''),\n        [\"Attack Rating\"] =  column_ifexists('attack_rating_d', '')\n    | extend [\"Vectra Pivot\"] = case(isnotempty(['Vectra Pivot']), strcat(['Vectra Pivot'], \"?pivot=Vectra-Sentinel-1.0.0\"), ['Vectra Pivot'])\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        [\"Entity ID\"],\n        Name,\n        Importance,\n        Type,\n        [\"Is Prioritized\"],\n        Severity,\n        [\"Urgency Score\"],\n        [\"Vectra Pivot\"],\n        Category,\n        [\"Last Detection URL\"],\n        [\"Last Detection Type\"],\n        [\"Last Detection ID\"],\n        [\"Last Detection\"],\n        [\"Active Detection Types\"],\n        [\"Last Updated\"],\n        [\"Breadth Contrib\"],\n        Velocity,\n        [\"Attack Rating\"]\n};\nVectraEntityScoring_view\n",
@@ -990,7 +990,7 @@
         "[variables('parserObject3')._parserId3]"
       ],
       "properties": {
-        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraEntityScoring')]",
+        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraEntityScoring')]",
         "contentId": "[variables('parserObject3').parserContentId3]",
         "kind": "Parser",
         "version": "[variables('parserObject3').parserVersion3]",
@@ -1020,7 +1020,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "VectraHealth Data Parser with template version 3.1.0",
+        "description": "VectraHealth Data Parser with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('parserObject4').parserVersion4]",
@@ -1034,7 +1034,7 @@
               "location": "[parameters('workspace-location')]",
               "properties": {
                 "eTag": "*",
-                "displayName": "Parser for VectraHealth",
+                "displayName": "VectraHealth",
                 "category": "Microsoft Sentinel Parser",
                 "functionAlias": "VectraHealth",
                 "query": "let VectraHealth_view  = view () { \n    Health_Data_CL\n    | extend\n        EventVendor=\"VectraHealth\",\n        EventProduct=\"VectraHealth\",\n        ['Last Updated'] = column_ifexists('system_version_last_update_s', ''),\n        ['CPU Usage - User (%)'] = column_ifexists('cpu_user_percent_d', ''),\n        ['CPU Usage - System (%)'] = column_ifexists('cpu_system_percent_d', ''),\n        ['CPU Usage - Idle (%)'] = column_ifexists('cpu_idle_percent_d', ''),\n        ['Disk Utilization (%)'] = column_ifexists('disk_disk_utilization_usage_percent_d', ''),\n        ['Memory Utilization (%)'] = column_ifexists('memory_usage_percent_d', ''),\n        ['Power Status'] = column_ifexists('power_status_s', ''),\n        ['Power Error'] = column_ifexists('power_error_s', ''),\n        Network = column_ifexists('network_s', ''),\n        Sensors = column_ifexists('sensors_s', ''),\n        Connectivity_Sensors = column_ifexists('connectivity_sensors_s', ''),\n        System_Version_Last_Update = column_ifexists('system_version_last_update_s', ''),\n        Trafficdrop_Sensors = column_ifexists('trafficdrop_sensors_s', '')\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        System_Version_Last_Update,\n        ['Last Updated'],\n        ['CPU Usage - User (%)'],\n        ['CPU Usage - System (%)'],\n        ['CPU Usage - Idle (%)'],\n        ['Disk Utilization (%)'],\n        ['Memory Utilization (%)'],\n        ['Power Status'],\n        ['Power Error'],\n        Network,\n        Sensors,\n        Connectivity_Sensors,\n        Trafficdrop_Sensors\n};\nVectraHealth_view()\n",
@@ -1056,7 +1056,7 @@
                 "[variables('parserObject4')._parserId4]"
               ],
               "properties": {
-                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraHealth')]",
+                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraHealth')]",
                 "contentId": "[variables('parserObject4').parserContentId4]",
                 "kind": "Parser",
                 "version": "[variables('parserObject4').parserVersion4]",
@@ -1086,7 +1086,7 @@
         "contentSchemaVersion": "3.0.0",
         "contentId": "[variables('parserObject4').parserContentId4]",
         "contentKind": "Parser",
-        "displayName": "Parser for VectraHealth",
+        "displayName": "VectraHealth",
         "contentProductId": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject4').parserContentId4,'-', '1.0.0')))]",
         "id": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject4').parserContentId4,'-', '1.0.0')))]",
         "version": "[variables('parserObject4').parserVersion4]"
@@ -1099,7 +1099,7 @@
       "location": "[parameters('workspace-location')]",
       "properties": {
         "eTag": "*",
-        "displayName": "Parser for VectraHealth",
+        "displayName": "VectraHealth",
         "category": "Microsoft Sentinel Parser",
         "functionAlias": "VectraHealth",
         "query": "let VectraHealth_view  = view () { \n    Health_Data_CL\n    | extend\n        EventVendor=\"VectraHealth\",\n        EventProduct=\"VectraHealth\",\n        ['Last Updated'] = column_ifexists('system_version_last_update_s', ''),\n        ['CPU Usage - User (%)'] = column_ifexists('cpu_user_percent_d', ''),\n        ['CPU Usage - System (%)'] = column_ifexists('cpu_system_percent_d', ''),\n        ['CPU Usage - Idle (%)'] = column_ifexists('cpu_idle_percent_d', ''),\n        ['Disk Utilization (%)'] = column_ifexists('disk_disk_utilization_usage_percent_d', ''),\n        ['Memory Utilization (%)'] = column_ifexists('memory_usage_percent_d', ''),\n        ['Power Status'] = column_ifexists('power_status_s', ''),\n        ['Power Error'] = column_ifexists('power_error_s', ''),\n        Network = column_ifexists('network_s', ''),\n        Sensors = column_ifexists('sensors_s', ''),\n        Connectivity_Sensors = column_ifexists('connectivity_sensors_s', ''),\n        System_Version_Last_Update = column_ifexists('system_version_last_update_s', ''),\n        Trafficdrop_Sensors = column_ifexists('trafficdrop_sensors_s', '')\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        System_Version_Last_Update,\n        ['Last Updated'],\n        ['CPU Usage - User (%)'],\n        ['CPU Usage - System (%)'],\n        ['CPU Usage - Idle (%)'],\n        ['Disk Utilization (%)'],\n        ['Memory Utilization (%)'],\n        ['Power Status'],\n        ['Power Error'],\n        Network,\n        Sensors,\n        Connectivity_Sensors,\n        Trafficdrop_Sensors\n};\nVectraHealth_view()\n",
@@ -1122,7 +1122,7 @@
         "[variables('parserObject4')._parserId4]"
       ],
       "properties": {
-        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraHealth')]",
+        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraHealth')]",
         "contentId": "[variables('parserObject4').parserContentId4]",
         "kind": "Parser",
         "version": "[variables('parserObject4').parserVersion4]",
@@ -1152,7 +1152,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "VectraLockdown Data Parser with template version 3.1.0",
+        "description": "VectraLockdown Data Parser with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('parserObject5').parserVersion5]",
@@ -1166,7 +1166,7 @@
               "location": "[parameters('workspace-location')]",
               "properties": {
                 "eTag": "*",
-                "displayName": "Parser for VectraLockdown",
+                "displayName": "VectraLockdown",
                 "category": "Microsoft Sentinel Parser",
                 "functionAlias": "VectraLockdown",
                 "query": "let VectraLockdown_view  = view () { \n    Lockdown_Data_CL\n    | extend\n        EventVendor=\"VectraLockdown\",\n        EventProduct=\"VectraLockdown\",\n        ID = column_ifexists('id_d', ''),\n        [\"Entity ID\"] = column_ifexists('entity_id_d', ''),\n        [\"Entity Name\"] = column_ifexists('entity_name_s', ''),\n        [\"Entity Type\"] = column_ifexists('entity_type_s ', ''),\n        Type = column_ifexists('type_s', ''),\n        [\"Locked Date\"] = column_ifexists('lock_event_timestamp_t', ''),\n        [\"Unlock Date\"] = column_ifexists('unlock_event_timestamp_t', ''),\n        [\"Locked By\"] = column_ifexists('locked_by_s', '')\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        [\"Entity ID\"],\n        [\"Entity Name\"],\n        [\"Entity Type\"],\n        Type,\n        [\"Locked Date\"],\n        [\"Unlock Date\"],\n        [\"Locked By\"]\n};\nVectraLockdown_view()\n",
@@ -1188,7 +1188,7 @@
                 "[variables('parserObject5')._parserId5]"
               ],
               "properties": {
-                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraLockdown')]",
+                "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraLockdown')]",
                 "contentId": "[variables('parserObject5').parserContentId5]",
                 "kind": "Parser",
                 "version": "[variables('parserObject5').parserVersion5]",
@@ -1218,7 +1218,7 @@
         "contentSchemaVersion": "3.0.0",
         "contentId": "[variables('parserObject5').parserContentId5]",
         "contentKind": "Parser",
-        "displayName": "Parser for VectraLockdown",
+        "displayName": "VectraLockdown",
         "contentProductId": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject5').parserContentId5,'-', '1.0.0')))]",
         "id": "[concat(take(variables('_solutionId'),50),'-','pr','-', uniqueString(concat(variables('_solutionId'),'-','Parser','-',variables('parserObject5').parserContentId5,'-', '1.0.0')))]",
         "version": "[variables('parserObject5').parserVersion5]"
@@ -1231,7 +1231,7 @@
       "location": "[parameters('workspace-location')]",
       "properties": {
         "eTag": "*",
-        "displayName": "Parser for VectraLockdown",
+        "displayName": "VectraLockdown",
         "category": "Microsoft Sentinel Parser",
         "functionAlias": "VectraLockdown",
         "query": "let VectraLockdown_view  = view () { \n    Lockdown_Data_CL\n    | extend\n        EventVendor=\"VectraLockdown\",\n        EventProduct=\"VectraLockdown\",\n        ID = column_ifexists('id_d', ''),\n        [\"Entity ID\"] = column_ifexists('entity_id_d', ''),\n        [\"Entity Name\"] = column_ifexists('entity_name_s', ''),\n        [\"Entity Type\"] = column_ifexists('entity_type_s ', ''),\n        Type = column_ifexists('type_s', ''),\n        [\"Locked Date\"] = column_ifexists('lock_event_timestamp_t', ''),\n        [\"Unlock Date\"] = column_ifexists('unlock_event_timestamp_t', ''),\n        [\"Locked By\"] = column_ifexists('locked_by_s', '')\n    | project\n        TimeGenerated,\n        EventVendor,\n        EventProduct,\n        ID,\n        [\"Entity ID\"],\n        [\"Entity Name\"],\n        [\"Entity Type\"],\n        Type,\n        [\"Locked Date\"],\n        [\"Unlock Date\"],\n        [\"Locked By\"]\n};\nVectraLockdown_view()\n",
@@ -1254,7 +1254,7 @@
         "[variables('parserObject5')._parserId5]"
       ],
       "properties": {
-        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'Parser for VectraLockdown')]",
+        "parentId": "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), 'VectraLockdown')]",
         "contentId": "[variables('parserObject5').parserContentId5]",
         "kind": "Parser",
         "version": "[variables('parserObject5').parserVersion5]",
@@ -1284,7 +1284,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "DetectXDR_detections_AnalyticalRules Analytics Rule with template version 3.1.0",
+        "description": "DetectXDR_detections_AnalyticalRules Analytics Rule with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]",
@@ -1294,7 +1294,7 @@
             {
               "type": "Microsoft.SecurityInsights/AlertRuleTemplates",
               "name": "[variables('analyticRuleObject1')._analyticRulecontentId1]",
-              "apiVersion": "2022-04-01-preview",
+              "apiVersion": "2023-02-01-preview",
               "kind": "Scheduled",
               "location": "[parameters('workspace-location')]",
               "properties": {
@@ -1333,26 +1333,26 @@
                   "aggregationKind": "AlertPerResult"
                 },
                 "customDetails": {
-                  "Summary": "Summary",
-                  "triaged": "triaged"
+                  "triaged": "triaged",
+                  "Summary": "Summary"
                 },
                 "alertDetailsOverride": {
-                  "alertDisplayNameFormat": "Vectra AI {{detection}} detected",
-                  "alertDescriptionFormat": "Detection category:  {{category}}\nDetails: {{Details}} \n",
                   "alertDynamicProperties": [
                     {
                       "alertProperty": "AlertLink",
                       "value": "url_detection"
                     }
-                  ]
+                  ],
+                  "alertDisplayNameFormat": "Vectra AI {{detection}} detected",
+                  "alertDescriptionFormat": "Detection category:  {{category}}\nDetails: {{Details}} \n"
                 },
                 "incidentConfiguration": {
                   "createIncident": false,
                   "groupingConfiguration": {
-                    "lookbackDuration": "5h",
-                    "matchingMethod": "AllEntities",
+                    "enabled": false,
+                    "lookbackDuration": "PT5H",
                     "reopenClosedIncident": false,
-                    "enabled": false
+                    "matchingMethod": "AllEntities"
                   }
                 }
               }
@@ -1408,7 +1408,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "DetectXDR_Prioritized_Entities_AnalyticalRules Analytics Rule with template version 3.1.0",
+        "description": "DetectXDR_Prioritized_Entities_AnalyticalRules Analytics Rule with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('analyticRuleObject2').analyticRuleVersion2]",
@@ -1418,7 +1418,7 @@
             {
               "type": "Microsoft.SecurityInsights/AlertRuleTemplates",
               "name": "[variables('analyticRuleObject2')._analyticRulecontentId2]",
-              "apiVersion": "2022-04-01-preview",
+              "apiVersion": "2023-02-01-preview",
               "kind": "Scheduled",
               "location": "[parameters('workspace-location')]",
               "properties": {
@@ -1457,16 +1457,14 @@
                   "aggregationKind": "AlertPerResult"
                 },
                 "customDetails": {
-                  "detections": "detections",
-                  "Entity_type": "Type",
-                  "Entity_importance": "Importance",
                   "Breadth": "breadth",
-                  "Velocity": "Velocity",
-                  "Attack_Rating": "attack_rating"
+                  "Entity_type": "Type",
+                  "Attack_Rating": "attack_rating",
+                  "Entity_importance": "Importance",
+                  "detections": "detections",
+                  "Velocity": "Velocity"
                 },
                 "alertDetailsOverride": {
-                  "alertDisplayNameFormat": "Priority Incident - {{Name}}  with Urgency Score of {{Urgency Score}}  ",
-                  "alertDescriptionFormat": "Entity {{Name}} has been prioritized by the Vectra AI prioritization algorithm with an urgency score of {{Urgency Score}}.\nAttack rating is {{Attack Rating}}.",
                   "alertDynamicProperties": [
                     {
                       "alertProperty": "ConfidenceLevel",
@@ -1476,15 +1474,17 @@
                       "alertProperty": "AlertLink",
                       "value": "url"
                     }
-                  ]
+                  ],
+                  "alertDisplayNameFormat": "Priority Incident - {{Name}}  with Urgency Score of {{Urgency Score}}  ",
+                  "alertDescriptionFormat": "Entity {{Name}} has been prioritized by the Vectra AI prioritization algorithm with an urgency score of {{Urgency Score}}.\nAttack rating is {{Attack Rating}}."
                 },
                 "incidentConfiguration": {
                   "createIncident": true,
                   "groupingConfiguration": {
+                    "enabled": true,
                     "lookbackDuration": "7d",
-                    "matchingMethod": "AllEntities",
                     "reopenClosedIncident": true,
-                    "enabled": true
+                    "matchingMethod": "AllEntities"
                   }
                 }
               }
@@ -1540,7 +1540,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "VectraXDR Workbook with template version 3.1.0",
+        "description": "VectraXDR Workbook with template version 3.1.1",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('workbookVersion1')]",
@@ -1640,12 +1640,12 @@
       "apiVersion": "2023-04-01-preview",
       "location": "[parameters('workspace-location')]",
       "properties": {
-        "version": "3.1.0",
+        "version": "3.1.1",
         "kind": "Solution",
         "contentSchemaVersion": "3.0.0",
         "displayName": "Vectra XDR",
         "publisherDisplayName": "Vectra Support",
-        "descriptionHtml": "<p><strong>Note:</strong> <em>There may be <a href=\"https://aka.ms/sentinelsolutionsknownissues\">known issues</a> pertaining to this Solution, please refer to them before installing.</em></p>\n<p>Vectra AI is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. Vectra AI's cloud-native platform - powered by our patented Attack Signal Intelligence- provide security teams with unified threat visibility, context and control across public cloud, SaaS, identity and data center networks in a prioritized feed. Vectra AI-driven Attack Signal IntelligenceTM, empowers SOC analysts to rapidly prioritize, investigate and respond to the most urgent cyber-attacks in their hybrid cloud environment. Organizations worldwide rely on Vectra AI's cloud-native platform and MDR services to see and stop attacks from becoming breaches. The Vectra AI App enables the security operations team to consume the industry's richest threat signals spanning public cloud, SaaS, identity and data center networks inside of Microsoft Sentinel. For more information, visit <a href=\"http://www.vectra.ai\">www.vectra.ai</a>.</p>\n<p>The Vectra XDR App for Microsoft Sentinel contains:\nData Connector to ingest events generated by Vectra XDR (through OMS agent).\nWorkbook: Dynamic dashboard view of Entities, Detections, Lockdown, Audit and, Health</p>\n<p><strong>Data Connectors:</strong> 1, <strong>Parsers:</strong> 5, <strong>Workbooks:</strong> 1, <strong>Analytic Rules:</strong> 2</p>\n<p><a href=\"https://aka.ms/azuresentinel\">Learn more about Microsoft Sentinel</a> | <a href=\"https://aka.ms/azuresentinelsolutionsdoc\">Learn more about Solutions</a></p>\n",
+        "descriptionHtml": "<p><strong>Note:</strong> Please refer to the following before installing the solution:</p>\n<p>• Review the solution <a href=\"https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Vectra%20XDR/ReleaseNotes.md\">Release Notes</a></p>\n<p>• There may be <a href=\"https://aka.ms/sentinelsolutionsknownissues\">known issues</a> pertaining to this Solution, please refer to them before installing.</p>\n<p>Vectra AI is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. Vectra AI's cloud-native platform - powered by our patented Attack Signal Intelligence- provide security teams with unified threat visibility, context and control across public cloud, SaaS, identity and data center networks in a prioritized feed. Vectra AI-driven Attack Signal IntelligenceTM, empowers SOC analysts to rapidly prioritize, investigate and respond to the most urgent cyber-attacks in their hybrid cloud environment. Organizations worldwide rely on Vectra AI's cloud-native platform and MDR services to see and stop attacks from becoming breaches. The Vectra AI App enables the security operations team to consume the industry's richest threat signals spanning public cloud, SaaS, identity and data center networks inside of Microsoft Sentinel. For more information, visit <a href=\"http://www.vectra.ai\">www.vectra.ai</a>.</p>\n<p>The Vectra XDR App for Microsoft Sentinel contains:\nData Connector to ingest events generated by Vectra XDR (through OMS agent).\nWorkbook: Dynamic dashboard view of Entities, Detections, Lockdown, Audit and, Health</p>\n<p><strong>Data Connectors:</strong> 1, <strong>Parsers:</strong> 5, <strong>Workbooks:</strong> 1, <strong>Analytic Rules:</strong> 2</p>\n<p><a href=\"https://aka.ms/azuresentinel\">Learn more about Microsoft Sentinel</a> | <a href=\"https://aka.ms/azuresentinelsolutionsdoc\">Learn more about Solutions</a></p>\n",
         "contentKind": "Solution",
         "contentProductId": "[variables('_solutioncontentProductId')]",
         "id": "[variables('_solutioncontentProductId')]",
diff --git a/Solutions/Vectra XDR/ReleaseNotes.md b/Solutions/Vectra XDR/ReleaseNotes.md
index 02556a8396..7b7b5b7f96 100644
--- a/Solutions/Vectra XDR/ReleaseNotes.md	
+++ b/Solutions/Vectra XDR/ReleaseNotes.md	
@@ -1,6 +1,7 @@
 | **Version** | **Date Modified (DD-MM-YYYY)** | **Change History**                                             |
 |-------------|--------------------------------|----------------------------------------------------------------|
-| 3.1.0       | 04-01-2024                     | Included **Parser** files in yaml format  						|
+| 3.1.1       | 03-04-2024                     | Repackaged for parser issue fix on reinstall                   |
+| 3.1.0       | 04-01-2024                     | Included **Parser** files in yaml format                       |
 | 3.0.2       | 04-10-2023                     | Enhanced **Data Connector** logic to post data into Sentinel   |
 | 3.0.1       | 21-08-2023                     | **Workbook** metadata issue resolved                           |
 | 3.0.0       | 03-08-2023                     | Initial Solution Release                                       |
\ No newline at end of file