msticpy.vis package

Visualization sub-package.

This contains the following functionality:

• entity_graph_tools - graphing and timeline support for entity visualization

• data_viewer - Bokeh-based data browser

• foliummap - mapping using the folium package

• matrix_plot - matrix/interaction plots

• morph_charts - experimental morph charts support

• mp_pandas_plot - pandas mp_plot accessor for plotting functions

• process_tree - process tree visualization

• timeline - event timeline and timeline_values visualizations

• timeline_duration - timeline durations

• timeline_pd_accessor - (deprecated) timeline pd accessor

• timeseries - timeseries analysis visualization

Submodules

• msticpy.vis.code_view module
  • display_html()
  • list_pygments_styles()
  • to_html()
• msticpy.vis.data_viewer module
  • DataTableColumnChooser
    • DataTableColumnChooser.dataframe_columns
    • DataTableColumnChooser.datatable_columns
    • DataTableColumnChooser.display()
    • DataTableColumnChooser.selected_columns
  • DataTableFilter
    • DataTableFilter.bool_filters
    • DataTableFilter.current_col
    • DataTableFilter.display()
    • DataTableFilter.filtered_dataframe
    • DataTableFilter.import_filters()
  • DataViewer
    • DataViewer.display()
    • DataViewer.filtered_data
    • DataViewer.filters
    • DataViewer.import_filters()
    • DataViewer.show()
  • FilterExpr
    • FilterExpr.column
    • FilterExpr.count()
    • FilterExpr.expr
    • FilterExpr.index()
    • FilterExpr.inv
    • FilterExpr.operator
• msticpy.vis.entity_graph_tools module
  • EntityGraph
    • EntityGraph.add_entity()
    • EntityGraph.add_incident()
    • EntityGraph.add_link()
    • EntityGraph.add_note()
    • EntityGraph.graph
    • EntityGraph.plot()
    • EntityGraph.remove_link()
    • EntityGraph.remove_node()
    • EntityGraph.to_df()
  • plot_entitygraph()
• msticpy.vis.figure_dimension module
  • bokeh_figure()
  • set_figure_size()
• msticpy.vis.foliummap module
  • FoliumMap
    • FoliumMap.folium_map
    • FoliumMap.add_feature_sub_groups()
    • FoliumMap.add_geo_hashes()
    • FoliumMap.add_geoloc_cluster()
    • FoliumMap.add_ip_cluster()
    • FoliumMap.add_ips()
    • FoliumMap.add_locations()
    • FoliumMap.add_locations_to_feature_subgroup()
    • FoliumMap.add_locations_to_marker_cluster()
    • FoliumMap.add_marker_clusters()
    • FoliumMap.center_map()
    • FoliumMap.create_feature_sub_group_of_marker_cluster()
    • FoliumMap.create_marker()
    • FoliumMap.create_marker_cluster()
    • FoliumMap.create_new_cluster_with_geohashes()
    • FoliumMap.create_new_cluster_with_locations()
    • FoliumMap.create_new_subgroup_with_geohashes()
    • FoliumMap.create_new_subgroup_with_locations()
    • FoliumMap.enable_layer_control()
    • FoliumMap.save_map()
  • decode_geo_hash()
  • decode_geohash_collection()
  • get_center_geo_locs()
  • get_center_ip_entities()
  • get_map_center()
  • plot_map()
• msticpy.vis.matrix_plot module
  • PlotParams
    • PlotParams.color
    • PlotParams.dist_count
    • PlotParams.field_list()
    • PlotParams.font_size
    • PlotParams.height
    • PlotParams.hide
    • PlotParams.intersect
    • PlotParams.invert
    • PlotParams.log_size
    • PlotParams.max_label_font_size
    • PlotParams.sort
    • PlotParams.sort_x
    • PlotParams.sort_y
    • PlotParams.title
    • PlotParams.value_col
    • PlotParams.width
    • PlotParams.x
    • PlotParams.x_col
    • PlotParams.x_column
    • PlotParams.y
    • PlotParams.y_col
    • PlotParams.y_column
  • plot_matrix()
• msticpy.vis.mordor_browser module
  • MordorBrowser
    • MordorBrowser.fields
    • MordorBrowser.selected_dset
• msticpy.vis.morph_charts module
  • MorphCharts
    • MorphCharts.display()
    • MorphCharts.get_chart_details()
    • MorphCharts.list_charts()
    • MorphCharts.search_charts()
• msticpy.vis.mp_pandas_plot module
  • MsticpyPlotAccessor
    • MsticpyPlotAccessor.folium_map()
    • MsticpyPlotAccessor.incident_graph()
    • MsticpyPlotAccessor.matrix()
    • MsticpyPlotAccessor.network()
    • MsticpyPlotAccessor.process_tree()
    • MsticpyPlotAccessor.timeline()
    • MsticpyPlotAccessor.timeline_duration()
    • MsticpyPlotAccessor.timeline_values()
• msticpy.vis.nbdisplay module
  • display_alert()
  • display_logon_data()
  • draw_alert_entity_graph()
  • exec_remaining_cells()
  • format_alert()
  • format_logon()
• msticpy.vis.network_plot module
  • plot_entity_graph()
  • plot_nx_graph()
• msticpy.vis.process_tree module
  • ProcessTreeAccessor
    • ProcessTreeAccessor.build()
    • ProcessTreeAccessor.plot()
  • TreeResult
    • TreeResult.count()
    • TreeResult.index()
    • TreeResult.levels
    • TreeResult.n_rows
    • TreeResult.proc_tree
    • TreeResult.schema
  • build_and_show_process_tree()
  • plot_process_tree()
• msticpy.vis.query_browser module
  • browse_queries()
• msticpy.vis.ti_browser module
  • browse_results()
  • get_ti_select_options()
  • raw_results()
  • ti_details_display()
• msticpy.vis.timeline module
  • PlotParams
    • PlotParams.alert
    • PlotParams.color
    • PlotParams.field_list()
    • PlotParams.fmt_title
    • PlotParams.group_by
    • PlotParams.height
    • PlotParams.hide
    • PlotParams.legend
    • PlotParams.overlay_color
    • PlotParams.overlay_columns
    • PlotParams.overlay_data
    • PlotParams.range_tool
    • PlotParams.ref_col
    • PlotParams.ref_event
    • PlotParams.ref_events
    • PlotParams.ref_label
    • PlotParams.ref_time
    • PlotParams.ref_time_col
    • PlotParams.ref_times
    • PlotParams.size
    • PlotParams.source_columns
    • PlotParams.time_column
    • PlotParams.title
    • PlotParams.width
    • PlotParams.xgrid
    • PlotParams.yaxis
    • PlotParams.ygrid
    • PlotParams.ylabel_cols
  • display_timeline()
• msticpy.vis.timeline_common module
  • calc_auto_plot_height()
  • check_df_columns()
  • create_data_grouping()
  • create_range_tool()
  • create_tool_tips()
  • get_color_palette()
  • get_def_source_cols()
  • get_ref_event_time()
  • get_tick_formatter()
  • get_time_bounds()
  • plot_ref_events()
  • plot_ref_line()
  • set_axes_and_grids()
• msticpy.vis.timeline_duration module
  • PlotParams
    • PlotParams.color
    • PlotParams.field_list()
    • PlotParams.height
    • PlotParams.hide
    • PlotParams.range_tool
    • PlotParams.ref_col
    • PlotParams.ref_events
    • PlotParams.ref_times
    • PlotParams.source_columns
    • PlotParams.title
    • PlotParams.width
    • PlotParams.xgrid
    • PlotParams.yaxis
    • PlotParams.ygrid
    • PlotParams.ylabel_cols
  • display_timeline_duration()
• msticpy.vis.timeline_pd_accessor module
  • TimeLineAccessor
    • TimeLineAccessor.plot()
    • TimeLineAccessor.plot_duration()
    • TimeLineAccessor.plot_values()
• msticpy.vis.timeline_values module
  • PlotParams
    • PlotParams.color
    • PlotParams.field_list()
    • PlotParams.group_by
    • PlotParams.height
    • PlotParams.hide
    • PlotParams.kind
    • PlotParams.legend
    • PlotParams.range_tool
    • PlotParams.ref_col
    • PlotParams.ref_event
    • PlotParams.ref_events
    • PlotParams.ref_time
    • PlotParams.ref_time_col
    • PlotParams.ref_times
    • PlotParams.source_columns
    • PlotParams.time_column
    • PlotParams.title
    • PlotParams.width
    • PlotParams.xgrid
    • PlotParams.yaxis
    • PlotParams.ygrid
    • PlotParams.ylabel_cols
  • display_timeline_values()
• msticpy.vis.timeseries module
  • display_timeseries_anomalies()
  • display_timeseries_anomolies()
• msticpy.vis.vtobject_browser module
  • VTObjectBrowser
    • VTObjectBrowser.display()