Getting Started

• Introduction
  • Use Cases and Environments
• Installing
  • Python 3.6 or Later
  • Creating a virtual environment
  • Installation
  • Selective Installation - using “extras”
• Package Summary
  • Data Acquisition and Queries
  • Data Processing and Enrichment
  • Security Analysis
  • Visualization
  • Utility Functions
  • Supported Platforms and Packages
• MSTICPy Package Configuration
  • Configuration sections
  • Specifying secrets as Environment Variables
  • Specifying secrets as Key Vault secrets
  • User Defaults Section
  • Extending msticpyconfig.yaml
  • Commented configuration file sample
  • See also
• MSTICPy Settings Editor
  • Checking your existing settings
  • Import your Config.json and create a msticpyconfig.yaml (Azure Sentinel)
  • Edit your msticpyconfig settings
  • More Settings
  • Azure Cloud and Authentication Settings
  • Optional Settings
  • Using MpConfigFile to check and manage your msticpyconfig.yaml
• Why Use Jupyter for Security Investigations?
  • What is Jupyter?
  • Why Jupyter?
  • Why Python?
  • References
• Jupyter, msticpy and Azure Sentinel
  • Open one of the Sample Notebooks