Analyzing Data

• Base64 Decoding and Unpacking
  • Base64 decode an input string
  • Using a DataFrame as input
  • Interpreting the DataFrame output
  • Decoding Nested Base64/Archives
  • IPython magic
  • Pandas Extension
• IoC Extraction
  • Looking for IoC in a String
  • Using a DataFrame as Input
  • IoCExtractor API
  • Predefined Regex Patterns
  • Adding your own pattern(s)
  • Merging output with source data
  • IPython magic
  • Pandas Extension
• Event Clustering
  • Processes on Host - Clustering
  • Host Logons
• Anomalous Sessions
  • Creating the Sessions
  • Model the sessions
  • Visualise the Modelled Sessions
  • Other Log Types + KQL