splunk-security_content/docs/mitre-map/detections.csv

1	Technique ID	Detection Available	Link	score
2	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	49
3	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	49
4	T1193	No	-	51
5	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	49
6	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	47
7	T1086	No	-	44
8	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	36
9	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	36
10	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	36
11	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	36
12	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	36
13	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	36
14	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	36
15	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	36
16	T1059.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_use_of_cmd_exe_to_launch_script_interpreters.yml	34
17	T1059.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_mshta_exe_running_scripts_in_command_line_arguments.yml	34
18	T1059.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	34
19	T1059.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	34
20	T1059.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	34
21	T1059.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_prohibited_applications_spawning_cmd_exe.yml	34
22	T1059.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/create_or_delete_windows_shares_using_net_exe.yml	34
23	T1105	No	-	40
24	T1060	No	-	38
25	T1547.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/registry_keys_used_for_persistence.yml	35
26	T1547.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/reg_exe_manipulating_windows_services_registry_keys.yml	35
27	T1547.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/registry_keys_used_for_privilege_escalation.yml	35
28	T1071.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/tor_traffic.yml	32
29	T1071.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_web_traffic_to_dynamic_domain_providers.yml	32
30	T1107	No	-	30
31	T1070.004	No	-	30
32	T1053.005	Yes	https://github.com/splunk/security-content/blob/develop/detections/schtasks_used_for_forcing_a_reboot.yml	24
33	T1053.005	Yes	https://github.com/splunk/security-content/blob/develop/detections/scheduled_task_name_used_by_dragonfly_threat_actors.yml	24
34	T1053.005	Yes	https://github.com/splunk/security-content/blob/develop/detections/schtasks_scheduling_job_on_remote_system.yml	24
35	T1053.005	Yes	https://github.com/splunk/security-content/blob/develop/detections/scheduled_tasks_used_in_badrabbit_ransomware.yml	24
36	T1003.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/unsigned_image_loaded_by_lsass.yml	20
37	T1003.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/dump_lsass_via_comsvcs_dll.yml	20
38	T1003.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_credential_dumping_through_lsass_access.yml	20
39	T1003.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_mimikatz_via_powershell_and_eventcode_4703.yml	20
40	T1003.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/access_lsass_memory_for_dump_creation.yml	20
41	T1003.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/create_remote_thread_into_lsass.yml	20
42	T1003.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_mimikatz_using_loaded_images.yml	20
43	T1059.005	No	-	26
44	T1082	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_attackers_scanning_for_vulnerable_jboss_servers.yml	23
45	T1082	Yes	https://github.com/splunk/security-content/blob/develop/detections/web_servers_executing_suspicious_processes.yml	23
46	T1078	Yes	https://github.com/splunk/security-content/blob/develop/detections/web_fraud___anomalous_user_clickspeed.yml	23
47	T1192	No	-	24
48	T1566.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_lnk_file_launching_a_process.yml	23
49	T1203	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_windows_dns_sigred_via_splunk_stream.yml	21
50	T1203	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_windows_dns_sigred_via_zeek.yml	21
51	T1083	No	-	23
52	T1005	No	-	22
53	T1016	No	-	22
54	T1057	No	-	22
55	T1076	No	-	20
56	T1021.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/remote_process_instantiation_via_wmi.yml	16
57	T1021.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/remote_desktop_network_traffic.yml	16
58	T1021.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/remote_desktop_network_bruteforce.yml	16
59	T1021.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/remote_desktop_process_running_on_system.yml	16
60	T1056.001	No	-	20
61	T1018	No	-	19
62	T1140	No	-	19
63	T1204.001	No	-	19
64	T1036.005	No	-	19
65	T1033	No	-	18
66	T1189	No	-	17
67	T1047	Yes	https://github.com/splunk/security-content/blob/develop/detections/remote_wmi_command_attempt.yml	11
68	T1047	Yes	https://github.com/splunk/security-content/blob/develop/detections/process_execution_via_wmi.yml	11
69	T1047	Yes	https://github.com/splunk/security-content/blob/develop/detections/wmi_permanent_event_subscription.yml	11
70	T1047	Yes	https://github.com/splunk/security-content/blob/develop/detections/script_execution_via_wmi.yml	11
71	T1047	Yes	https://github.com/splunk/security-content/blob/develop/detections/wmi_permanent_event_subscription___sysmon.yml	11
72	T1047	Yes	https://github.com/splunk/security-content/blob/develop/detections/wmi_temporary_event_subscription.yml	11
73	T1560.001	No	-	16
74	T1043	No	-	16
75	T1543.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/sc_exe_manipulating_windows_services.yml	15
76	T1555.003	No	-	15
77	T1503	No	-	15
78	T1112	Yes	https://github.com/splunk/security-content/blob/develop/detections/disabling_remote_user_account_control.yml	13
79	T1112	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_reg_exe_process.yml	13
80	T1049	No	-	14
81	T1136.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_new_local_admin_account.yml	11
82	T1136.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/short_lived_windows_accounts.yml	11
83	T1136.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/create_local_admin_accounts_using_net_exe.yml	11
84	T1553.002	No	-	14
85	T1074.001	No	-	14
86	T1087.001	No	-	14
87	T1116	No	-	14
88	T1046	No	-	13
89	T1113	No	-	12
90	T1045	No	-	12
91	T1027.002	No	-	12
92	T1041	No	-	12
93	T1218.011	Yes	https://github.com/splunk/security-content/blob/develop/detections/rundll_loading_dll_by_ordinal.yml	10
94	T1021.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/smb_traffic_spike___mltk.yml	9
95	T1021.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/smb_traffic_spike.yml	9
96	T1063	No	-	11
97	T1073	No	-	11
98	T1133	No	-	11
99	T1574.002	No	-	11
100	T1518.001	No	-	11
101	T1059	No	-	11
102	T1085	No	-	11
103	T1571	No	-	11
104	T1505.003	No	-	10
105	T1087.002	No	-	10
106	T1136.002	No	-	10
107	T1055	No	-	10
108	T1100	No	-	10
109	T1559.002	No	-	9
110	T1068	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_child_process_of_zoom.yml	7
111	T1068	Yes	https://github.com/splunk/security-content/blob/develop/detections/child_processes_of_spoolsv_exe.yml	7
112	T1564.003	No	-	9
113	T1560	No	-	9
114	T1143	No	-	9
115	T1173	No	-	9
116	T1090.002	No	-	9
117	T1003	No	-	9
118	T1562.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/unload_sysmon_filter_driver.yml	7
119	T1562.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_stop_security_service.yml	7
120	T1119	No	-	9
121	T1218.010	No	-	8
122	T1035	No	-	8
123	T1219	No	-	8
124	T1569.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_running_windows_service.yml	7
125	T1132.001	No	-	8
126	T1102.002	No	-	8
127	T1071.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/dns_record_changed.yml	1
128	T1071.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_long_dns_txt_record_response.yml	1
129	T1071.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/dns_query_length_outliers___mltk.yml	1
130	T1071.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/detection_of_dns_tunnels.yml	1
131	T1071.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/dns_query_length_with_high_standard_deviation.yml	1
132	T1071.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/dns_query_requests_resolved_by_unauthorized_dns_servers.yml	1
133	T1071.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/excessive_dns_failures.yml	1
134	T1135	No	-	8
135	T1190	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_f5_tmui_rct_cve_2020_5902.yml	6
136	T1190	Yes	https://github.com/splunk/security-content/blob/develop/detections/sql_injection_with_long_urls.yml	6
137	T1117	No	-	8
138	T1548.002	No	-	8
139	T1065	No	-	8
140	T1003.004	No	-	8
141	T1027.005	No	-	7
142	T1106	No	-	7
143	T1066	No	-	7
144	T1007	No	-	7
145	T1059.007	No	-	7
146	T1070.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_wevtutil_usage.yml	5
147	T1070.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/windows_event_log_cleared.yml	5
148	T1573.001	No	-	7
149	T1023	No	-	7
150	T1552.001	No	-	7
151	T1555	No	-	7
152	T1547.009	No	-	7
153	T1221	No	-	7
154	T1069.002	No	-	7
155	T1021.004	No	-	7
156	T1012	No	-	7
157	T1009	No	-	6
158	T1114.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/hosts_receiving_high_volume_of_network_traffic_from_email_server.yml	4
159	T1114.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/email_servers_sending_high_volume_traffic_to_hosts.yml	4
160	T1048.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/protocol_or_port_mismatch.yml	4
161	T1048.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/clients_connecting_to_multiple_dns_servers.yml	4
162	T1003.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempted_credential_dump_from_registry_via_reg_exe.yml	5
163	T1036.004	No	-	6
164	T1027.001	No	-	6
165	T1074.002	No	-	5
166	T1218.005	No	-	5
167	T1566.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_dns_requests_to_phishing_sites_leveraging_evilginx2.yml	4
168	T1059.006	No	-	5
169	T1223	No	-	5
170	T1573.002	No	-	5
171	T1099	No	-	5
172	T1055.001	No	-	5
173	T1120	No	-	5
174	T1218.001	No	-	5
175	T1550.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_activity_related_to_pass_the_hash_attacks.yml	4
176	T1564.001	No	-	5
177	T1546.003	No	-	5
178	T1027.003	No	-	5
179	T1546.008	Yes	https://github.com/splunk/security-content/blob/develop/detections/overwriting_accessibility_binaries.yml	4
180	T1001.002	No	-	5
181	T1040	No	-	5
182	T1070.006	No	-	5
183	T1084	No	-	5
184	T1015	No	-	5
185	T1194	No	-	5
186	T1075	No	-	5
187	T1110	No	-	5
188	T1090	No	-	5
189	T1036	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_writes_to_system_volume_information.yml	0
190	T1036	Yes	https://github.com/splunk/security-content/blob/develop/detections/system_processes_run_from_unexpected_locations.yml	0
191	T1036	Yes	https://github.com/splunk/security-content/blob/develop/detections/execution_of_file_with_multiple_extensions.yml	0
192	T1036	Yes	https://github.com/splunk/security-content/blob/develop/detections/execution_of_file_with_spaces_before_extension.yml	0
193	T1036	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_writes_to_windows_recycle_bin.yml	0
194	T1158	No	-	5
195	T1170	No	-	5
196	T1562.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_launching_netsh.yml	4
197	T1102.001	No	-	5
198	T1102	No	-	4
199	T1003.005	No	-	4
200	T1124	No	-	4
201	T1570	No	-	4
202	T1014	No	-	4
203	T1025	No	-	4
204	T1487	No	-	4
205	T1496	No	-	4
206	T1574.001	No	-	4
207	T1036.002	No	-	4
208	T1036.003	No	-	4
209	T1071.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_outbound_smb_traffic.yml	3
210	T1093	No	-	4
211	T1094	No	-	4
212	T1055.012	No	-	4
213	T1561.002	No	-	4
214	T1038	No	-	4
215	T1078.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_excessive_account_lockouts_from_endpoint.yml	2
216	T1078.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_excessive_user_account_lockouts.yml	2
217	T1560.003	No	-	4
218	T1110.002	No	-	3
219	T1020	No	-	3
220	T1053.002	No	-	3
221	T1485	Yes	https://github.com/splunk/security-content/blob/develop/detections/deleting_shadow_copies.yml	2
222	T1072	Yes	https://github.com/splunk/security-content/blob/develop/detections/detection_of_tools_built_by_nirsoft.yml	2
223	T1027.004	No	-	3
224	T1090.003	No	-	3
225	T1542.003	No	-	3
226	T1008	No	-	3
227	T1529	No	-	3
228	T1069.001	No	-	3
229	T1097	No	-	3
230	T1197	No	-	3
231	T1104	No	-	3
232	T1110.003	No	-	3
233	T1095	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_large_outbound_icmp_packets.yml	2
234	T1188	No	-	3
235	T1039	No	-	3
236	T1550.003	No	-	3
237	T1572	No	-	3
238	T1486	No	-	3
239	T1500	No	-	3
240	T1071.003	No	-	3
241	T1518	No	-	3
242	T1078.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/identify_new_user_accounts.yml	2
243	T1071	No	-	3
244	T1067	No	-	3
245	T1091	No	-	3
246	T1098	No	-	3
247	T1176	No	-	2
248	T1187	No	-	2
249	T1032	No	-	2
250	T1137	No	-	2
251	T1564.005	No	-	2
252	T1210	No	-	2
253	T1559.001	No	-	2
254	T1080	No	-	2
255	T1560.002	No	-	2
256	T1115	No	-	2
257	T1218.007	No	-	2
258	T1542.002	No	-	2
259	T1114.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/email_files_written_outside_of_the_outlook_directory.yml	1
260	T1547.004	No	-	2
261	T1199	No	-	2
262	T1087.003	No	-	2
263	T1090.001	No	-	2
264	T1218.003	No	-	2
265	T1037.001	No	-	2
266	T1222.002	No	-	2
267	T1567.002	No	-	2
268	T1134.002	No	-	2
269	T1191	No	-	2
270	T1003.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/credential_dumping_via_copy_command_from_shadow_copy.yml	-2
271	T1003.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/creation_of_shadow_copy.yml	-2
272	T1003.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/credential_dumping_via_symlink_to_shadow_copy.yml	-2
273	T1003.003	Yes	https://github.com/splunk/security-content/blob/develop/detections/creation_of_shadow_copy_with_wmic_and_powershell.yml	-2
274	T1213.002	No	-	2
275	T1492	No	-	2
276	T1201	No	-	2
277	T1125	No	-	2
278	T1565.001	No	-	2
279	T1004	No	-	2
280	T1055.002	No	-	2
281	T1109	No	-	2
282	T1195.002	No	-	2
283	T1069	No	-	2
284	T1059.004	No	-	2
285	T1480.001	No	-	2
286	T1501	No	-	1
287	T1070.002	No	-	1
288	T1558.001	No	-	1
289	T1195	No	-	1
290	T1042	No	-	1
291	T1546.011	Yes	https://github.com/splunk/security-content/blob/develop/detections/shim_database_installation_with_suspicious_parameters.yml	-2
292	T1546.011	Yes	https://github.com/splunk/security-content/blob/develop/detections/shim_database_file_creation.yml	-2
293	T1546.011	Yes	https://github.com/splunk/security-content/blob/develop/detections/registry_keys_for_creating_shim_databases.yml	-2
294	T1183	No	-	1
295	T1493	No	-	1
296	T1546.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_changes_to_file_associations.yml	0
297	T1561.001	No	-	1
298	T1562.002	No	-	1
299	T1186	No	-	1
300	T1134	No	-	1
301	T1126	No	-	1
302	T1074	No	-	1
303	T1001	No	-	1
304	T1172	No	-	1
305	T1504	No	-	1
306	T1213	No	-	1
307	T1216.001	No	-	1
308	T1052.001	No	-	1
309	T1211	No	-	1
310	T1137.002	No	-	1
311	T1568.001	No	-	1
312	T1123	No	-	1
313	T1137.001	No	-	1
314	T1528	No	-	1
315	T1056.004	No	-	1
316	T1146	No	-	1
317	T1546.012	No	-	1
318	T1056.002	No	-	1
319	T1573	No	-	1
320	T1543.002	No	-	1
321	T1053.003	No	-	1
322	T1534	No	-	1
323	T1483	No	-	1
324	T1546.009	No	-	1
325	T1574.012	No	-	1
326	T1552.004	No	-	1
327	T1546.015	No	-	1
328	T1001.003	No	-	1
329	T1218.008	No	-	1
330	T1090.004	No	-	1
331	T1182	No	-	1
332	T1574.006	No	-	1
333	T1174	No	-	1
334	T1546.013	No	-	1
335	T1564.004	No	-	1
336	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_spike_in_aws_api_activity.yml	-12
337	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/abnormally_high_aws_instances_terminated_by_user___mltk.yml	-12
338	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/abnormally_high_aws_instances_launched_by_user___mltk.yml	-12
339	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_new_user_aws_console_login.yml	-12
340	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/aws_cross_account_activity_from_previously_unseen_account.yml	-12
341	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_new_api_calls_from_user_roles.yml	-12
342	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/ec2_instance_started_with_previously_unseen_user.yml	-12
343	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_aws_api_activities_from_unapproved_accounts.yml	-12
344	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_spike_in_security_group_activity.yml	-12
345	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/abnormally_high_aws_instances_launched_by_user.yml	-12
346	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/abnormally_high_aws_instances_terminated_by_user.yml	-12
347	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/ec2_instance_modified_with_previously_unseen_user.yml	-12
348	T1078.004	Yes	https://github.com/splunk/security-content/blob/develop/detections/cloud_compute_instance_created_by_previously_unseen_user.yml	-12
349	T1001.001	No	-	1
350	T1030	No	-	1
351	T1568.003	No	-	1
352	T1122	No	-	1
353	T1565.003	No	-	1
354	T1220	No	-	1
355	T1489	No	-	1
356	T1550.001	No	-	1
357	T1556.002	No	-	1
358	T1010	No	-	1
359	T1102.003	No	-	1
360	T1482	No	-	1
361	T1497.002	No	-	1
362	T1200	No	-	1
363	T1527	No	-	1
364	T1494	No	-	1
365	T1070.003	No	-	1
366	T1096	No	-	1
367	T1214	No	-	1
368	T1021.006	No	-	1
369	T1488	No	-	1
370	T1055.013	No	-	1
371	T1134.001	No	-	1
372	T1021.005	No	-	1
373	T1138	No	-	1
374	T1026	No	-	1
375	T1070.005	No	-	1
376	T1037	No	-	1
377	T1565.002	No	-	1
378	T1568.002	No	-	1
379	T1098.002	No	-	1
380	T1137.004	No	-	1
381	T1036.001	No	-	1
382	T1092	No	-	1
383	T1497.001	No	-	1
384	T1552.002	No	-	1
385	T1491.001	No	-	1
386	T1137.006	No	-	1
387	T1127.001	No	-	1
388	T1145	No	-	1
389	T1552.006	No	-	1
390	T1028	No	-	1