SigninLogs
| where ResultType =~ "0" and (not((Location in~ ("CO", "US"))))
