diff --git a/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPATUsedWithBrowser.yaml b/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPATUsedWithBrowser.yaml
index 659fd15c2c7..183ea14a2a8 100644
--- a/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPATUsedWithBrowser.yaml	
+++ b/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPATUsedWithBrowser.yaml	
@@ -30,5 +30,5 @@ entityMappings:
     fieldMappings:
       - identifier: Address
         columnName: IpAddress
-version: 1.0.2
+version: 1.0.3
 kind: Scheduled
\ No newline at end of file
diff --git a/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPipelineModifiedbyNewUser.yaml b/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPipelineModifiedbyNewUser.yaml
index b6d99c2d3b7..4ca036e417d 100644
--- a/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPipelineModifiedbyNewUser.yaml	
+++ b/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOPipelineModifiedbyNewUser.yaml	
@@ -60,5 +60,5 @@ entityMappings:
     fieldMappings:
       - identifier: Address
         columnName: IpAddress
-version: 1.0.4
+version: 1.0.5
 kind: Scheduled
diff --git a/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOVariableModifiedByNewUser.yaml b/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOVariableModifiedByNewUser.yaml
index aa9cbb8f209..bbff6ffe14d 100644
--- a/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOVariableModifiedByNewUser.yaml	
+++ b/Solutions/AzureDevOpsAuditing/Analytic Rules/ADOVariableModifiedByNewUser.yaml	
@@ -49,5 +49,5 @@ entityMappings:
     fieldMappings:
       - identifier: Address
         columnName: IpAddress
-version: 1.0.2
+version: 1.0.3
 kind: Scheduled
\ No newline at end of file
diff --git a/Solutions/AzureDevOpsAuditing/Analytic Rules/NewAgentAddedToPoolbyNewUserorofNewOS.yaml b/Solutions/AzureDevOpsAuditing/Analytic Rules/NewAgentAddedToPoolbyNewUserorofNewOS.yaml
index 1116052fa92..c0ffc901034 100644
--- a/Solutions/AzureDevOpsAuditing/Analytic Rules/NewAgentAddedToPoolbyNewUserorofNewOS.yaml	
+++ b/Solutions/AzureDevOpsAuditing/Analytic Rules/NewAgentAddedToPoolbyNewUserorofNewOS.yaml	
@@ -68,5 +68,5 @@ entityMappings:
     fieldMappings:
       - identifier: Address
         columnName: IpAddress
-version: 1.0.2
+version: 1.0.3
 kind: Scheduled
\ No newline at end of file
diff --git a/Solutions/AzureDevOpsAuditing/Package/3.0.1.zip b/Solutions/AzureDevOpsAuditing/Package/3.0.1.zip
index b003ebcdbbf..32d5fa2798f 100644
Binary files a/Solutions/AzureDevOpsAuditing/Package/3.0.1.zip and b/Solutions/AzureDevOpsAuditing/Package/3.0.1.zip differ
diff --git a/Solutions/AzureDevOpsAuditing/Package/mainTemplate.json b/Solutions/AzureDevOpsAuditing/Package/mainTemplate.json
index b6268370af3..63a05adad91 100644
--- a/Solutions/AzureDevOpsAuditing/Package/mainTemplate.json
+++ b/Solutions/AzureDevOpsAuditing/Package/mainTemplate.json
@@ -59,18 +59,18 @@
       "_analyticRulecontentProductId3": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','bf07ca9c-e408-443a-8939-6860a45a929e','-', '1.0.2')))]"
     },
     "analyticRuleObject4": {
-      "analyticRuleVersion4": "1.0.2",
+      "analyticRuleVersion4": "1.0.3",
       "_analyticRulecontentId4": "5f0d80db-3415-4265-9d52-8466b7372e3a",
       "analyticRuleId4": "[resourceId('Microsoft.SecurityInsights/AlertRuleTemplates', '5f0d80db-3415-4265-9d52-8466b7372e3a')]",
       "analyticRuleTemplateSpecName4": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('5f0d80db-3415-4265-9d52-8466b7372e3a')))]",
-      "_analyticRulecontentProductId4": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','5f0d80db-3415-4265-9d52-8466b7372e3a','-', '1.0.2')))]"
+      "_analyticRulecontentProductId4": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','5f0d80db-3415-4265-9d52-8466b7372e3a','-', '1.0.3')))]"
     },
     "analyticRuleObject5": {
-      "analyticRuleVersion5": "1.0.4",
+      "analyticRuleVersion5": "1.0.5",
       "_analyticRulecontentId5": "155e9134-d5ad-4a6f-88f3-99c220040b66",
       "analyticRuleId5": "[resourceId('Microsoft.SecurityInsights/AlertRuleTemplates', '155e9134-d5ad-4a6f-88f3-99c220040b66')]",
       "analyticRuleTemplateSpecName5": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('155e9134-d5ad-4a6f-88f3-99c220040b66')))]",
-      "_analyticRulecontentProductId5": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','155e9134-d5ad-4a6f-88f3-99c220040b66','-', '1.0.4')))]"
+      "_analyticRulecontentProductId5": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','155e9134-d5ad-4a6f-88f3-99c220040b66','-', '1.0.5')))]"
     },
     "analyticRuleObject6": {
       "analyticRuleVersion6": "1.0.3",
@@ -87,11 +87,11 @@
       "_analyticRulecontentProductId7": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','4ca74dc0-8352-4ac5-893c-73571cc78331','-', '1.0.2')))]"
     },
     "analyticRuleObject8": {
-      "analyticRuleVersion8": "1.0.2",
+      "analyticRuleVersion8": "1.0.3",
       "_analyticRulecontentId8": "3b9a44d7-c651-45ed-816c-eae583a6f2f1",
       "analyticRuleId8": "[resourceId('Microsoft.SecurityInsights/AlertRuleTemplates', '3b9a44d7-c651-45ed-816c-eae583a6f2f1')]",
       "analyticRuleTemplateSpecName8": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('3b9a44d7-c651-45ed-816c-eae583a6f2f1')))]",
-      "_analyticRulecontentProductId8": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','3b9a44d7-c651-45ed-816c-eae583a6f2f1','-', '1.0.2')))]"
+      "_analyticRulecontentProductId8": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','3b9a44d7-c651-45ed-816c-eae583a6f2f1','-', '1.0.3')))]"
     },
     "analyticRuleObject9": {
       "analyticRuleVersion9": "1.0.3",
@@ -143,11 +143,11 @@
       "_analyticRulecontentProductId15": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','adc32a33-1cd6-46f5-8801-e3ed8337885f','-', '1.0.2')))]"
     },
     "analyticRuleObject16": {
-      "analyticRuleVersion16": "1.0.2",
-      "_analyticRulecontentId16": "4ce177b3-56b1-4f0e-b83e-27eed4cb0b1",
-      "analyticRuleId16": "[resourceId('Microsoft.SecurityInsights/AlertRuleTemplates', '4ce177b3-56b1-4f0e-b83e-27eed4cb0b1')]",
-      "analyticRuleTemplateSpecName16": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('4ce177b3-56b1-4f0e-b83e-27eed4cb0b1')))]",
-      "_analyticRulecontentProductId16": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','4ce177b3-56b1-4f0e-b83e-27eed4cb0b1','-', '1.0.2')))]"
+      "analyticRuleVersion16": "1.0.3",
+      "_analyticRulecontentId16": "4ce177b3-56b1-4f0e-b83e-27eed4cb0b16",
+      "analyticRuleId16": "[resourceId('Microsoft.SecurityInsights/AlertRuleTemplates', '4ce177b3-56b1-4f0e-b83e-27eed4cb0b16')]",
+      "analyticRuleTemplateSpecName16": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('4ce177b3-56b1-4f0e-b83e-27eed4cb0b16')))]",
+      "_analyticRulecontentProductId16": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','4ce177b3-56b1-4f0e-b83e-27eed4cb0b16','-', '1.0.3')))]"
     },
     "analyticRuleObject17": {
       "analyticRuleVersion17": "1.0.3",