Index

_

_changed_data (msticpy.config.query_editor.QueryParameterEditWidget attribute)

A

AadTenantId (msticpy.datamodel.entities.account.Account attribute) AadUserId (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.account.Account property) (msticpy.datamodel.entities.User property) AbuseIPDB (class in msticpy.context.tiproviders.abuseipdb) accessor (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep attribute) Account (class in msticpy.datamodel.entities.account) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.entities.process.Process attribute) action (msticpy.nbwidgets.select_alert.AlertSelector attribute) (msticpy.nbwidgets.select_alert.SelectAlert attribute) add_attr() (msticpy.datamodel.entities.entity_graph.Edge method) add_check() (msticpy.context.preprocess_observable.PreProcessor method) add_connection() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_connections_mixin.QueryProviderConnectionsMixin method) add_custom_query() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) add_data_queries_to_entities() (in module msticpy.init.pivot_init.pivot_data_queries) add_data_source() (msticpy.data.core.query_store.QueryStore method) add_edge() (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.entity_graph.Node method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) add_entity() (msticpy.vis.entity_graph_tools.EntityGraph method) add_feature_sub_groups() (msticpy.vis.foliummap.FoliumMap method) add_geo_hashes() (msticpy.vis.foliummap.FoliumMap method) add_geoloc_cluster() (msticpy.vis.foliummap.FoliumMap method) add_incident() (msticpy.vis.entity_graph_tools.EntityGraph method) add_ioc_queries_to_entities() (in module msticpy.init.pivot_init.pivot_ti_provider) add_ioc_type() (msticpy.transform.iocextract.IoCExtract method) add_ip_cluster() (msticpy.vis.foliummap.FoliumMap method) add_ips() (msticpy.vis.foliummap.FoliumMap method) add_link() (msticpy.vis.entity_graph_tools.EntityGraph method) add_locations() (msticpy.vis.foliummap.FoliumMap method) add_locations_to_feature_subgroup() (msticpy.vis.foliummap.FoliumMap method) add_locations_to_marker_cluster() (msticpy.vis.foliummap.FoliumMap method) add_marker_clusters() (msticpy.vis.foliummap.FoliumMap method) add_note() (msticpy.vis.entity_graph_tools.EntityGraph method) add_observation() (msticpy.analysis.observationlist.Observations method) add_parameter() (msticpy.config.query_editor.QueryParameterEditWidget method) add_pivot_functions() (in module msticpy.init.pivot_init.vt_pivot) add_process_features() (in module msticpy.analysis.eventcluster) add_provider() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.lookup.Lookup method) (msticpy.context.tilookup.TILookup method) add_queries_to_entities() (in module msticpy.init.pivot_init.pivot_data_queries) add_query() (msticpy.config.query_editor.QueryEditWidget method) (msticpy.data.core.query_store.QueryStore method) add_query_filter() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver method) (msticpy.data.drivers.driver_base.DriverBase method) (msticpy.data.drivers.elastic_driver.ElasticDriver method) (msticpy.data.drivers.kql_driver.KqlDriver method) (msticpy.data.drivers.kusto_driver.KustoDriver method) (msticpy.data.drivers.local_data_driver.LocalDataDriver method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver method) (msticpy.data.drivers.mdatp_driver.MDATPDriver method) (msticpy.data.drivers.mordor_driver.MordorDriver method) (msticpy.data.drivers.odata_driver.OData method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver method) (msticpy.data.drivers.splunk_driver.SplunkDriver method) (msticpy.data.drivers.sumologic_driver.SumologicDriver method) add_related_alerts() (in module msticpy.nbtools.security_alert_graph) add_summary_items() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary method) add_tab() (msticpy.config.comp_edit.CompEditTabs method) add_unbound_pivot_function() (in module msticpy.init.pivot_core.pivot_register_reader) additional_properties (msticpy.analysis.observationlist.Observation attribute) Address (msticpy.datamodel.entities.ip_address.IpAddress attribute) Alert (class in msticpy.datamodel.entities.alert) alert (msticpy.vis.timeline.PlotParams attribute) alert_details_override (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) alert_id (msticpy.nbwidgets.select_alert.AlertSelector attribute) (msticpy.nbwidgets.select_alert.SelectAlert attribute) AlertDisplayName (msticpy.datamodel.entities.alert.Alert attribute) AlertId (msticpy.datamodel.entities.alert.Alert property) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property)

alerts (msticpy.nbwidgets.select_alert.AlertSelector attribute) (msticpy.nbwidgets.select_alert.SelectAlert attribute) AlertSelector (class in msticpy.nbwidgets.select_alert) AlertType (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) Algorithm (class in msticpy.datamodel.entities.entity_enums) (msticpy.datamodel.entities.file_hash.FileHash attribute) alias (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) aliases (msticpy.data.core.query_template.QueryMetadata attribute) (msticpy.data.core.query_template.QueryParameter attribute) all (msticpy.init.pivot_init.pivot_data_queries.QueryParams attribute) ALL (msticpy.init.pivot_init.vt_pivot.VTAPIScope attribute) all_fields() (msticpy.analysis.observationlist.Observation class method) ALLOWED_KWARGS (msticpy.nbwidgets.core.RegisteredWidget attribute) (msticpy.nbwidgets.get_environment_key.GetEnvironmentKey attribute) (msticpy.nbwidgets.get_text.GetText attribute) (msticpy.nbwidgets.query_time.QueryTime attribute) analytic (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) analyze() (msticpy.analysis.timeseries.MsticpyTimeSeriesAccessor method) anomaly_periods() (msticpy.analysis.timeseries.MsticpyTimeSeriesAccessor method) AntispamDirection (msticpy.datamodel.entities.mail_message.MailMessage attribute) api_root (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver attribute) api_type (msticpy.context.vtlookupv3.vtlookup.VTParams attribute) api_var_name (msticpy.context.vtlookupv3.vtlookup.VTParams attribute) api_ver (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver attribute) APILookupParams (class in msticpy.context.http_provider) append_summary_items() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary method) AppId (msticpy.datamodel.entities.cloud_application.CloudApplication attribute) (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) apply_query_filter() (msticpy.data.core.query_store.QueryStore method) apply_threshold() (msticpy.analysis.timeseries.MsticpyTimeSeriesAccessor method) AppOwnerTenantId (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) arg_to_list() (in module msticpy.common.utility.types) args (msticpy.common.exceptions.MsticpyAzureConfigError attribute) (msticpy.common.exceptions.MsticpyAzureConnectionError attribute) (msticpy.common.exceptions.MsticpyConfigError attribute) (msticpy.common.exceptions.MsticpyConnectionError attribute) (msticpy.common.exceptions.MsticpyDataQueryError attribute) (msticpy.common.exceptions.MsticpyException attribute) (msticpy.common.exceptions.MsticpyImportExtraError attribute) (msticpy.common.exceptions.MsticpyKeyVaultConfigError attribute) (msticpy.common.exceptions.MsticpyKeyVaultMissingSecretError attribute) (msticpy.common.exceptions.MsticpyKqlConnectionError attribute) (msticpy.common.exceptions.MsticpyMissingDependencyError attribute) (msticpy.common.exceptions.MsticpyNoDataSourceError attribute) (msticpy.common.exceptions.MsticpyNotConnectedError attribute) (msticpy.common.exceptions.MsticpyParameterError attribute) (msticpy.common.exceptions.MsticpyResourceError attribute) (msticpy.common.exceptions.MsticpyUserConfigError attribute) (msticpy.common.exceptions.MsticpyUserError attribute) (msticpy.common.provider_settings.ProviderSettings attribute) (msticpy.common.wsconfig.WorkspaceConfig property) (msticpy.context.geoip.GeoIPDatabaseError attribute) (msticpy.context.tiproviders.riskiq.RiskIQAPIUserError attribute) (msticpy.context.tiproviders.riskiq.RiskIQUserError attribute) (msticpy.context.vtlookupv3.vtlookupv3.MsticpyVTGraphSaveGraphError attribute) (msticpy.context.vtlookupv3.vtlookupv3.MsticpyVTNoDataError attribute) (msticpy.data.core.query_template.Query attribute) (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) ARGS (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) args (msticpy.transform.proc_tree_schema.ProcessTreeSchemaException attribute) as_integer_ratio() (msticpy.nbwidgets.core.TimeUnit method) ask() (msticpy.aiagents.mp_docs_rag_magic.DocsRagMagic method) ask_question() (in module msticpy.aiagents.rag_agents) Asn (msticpy.datamodel.entities.geo_location.GeoLocation attribute) assigned_entities (msticpy.init.pivot_init.pivot_data_queries.PivQuerySettings attribute) attack_mappings (msticpy.data.drivers.mordor_driver.MordorEntry attribute) attr_for_entity() (msticpy.init.pivot_core.pivot_register.PivotRegistration method) ATTRIBUTES (msticpy.context.vtlookupv3.vtlookupv3.VTObjectProperties attribute) auth_secrets_client() (in module msticpy.common.provider_settings) auth_str (msticpy.context.http_provider.APILookupParams attribute) auth_type (msticpy.context.http_provider.APILookupParams attribute) author (msticpy.data.drivers.mordor_driver.MordorEntry attribute) authority_uri (msticpy.auth.cloud_mappings.AzureCloudConfig property) (msticpy.auth.keyvault_settings.KeyVaultSettings property) AuthorizedBy (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) AuthParams (class in msticpy.data.drivers.azure_kusto_driver) available_providers (msticpy.context.contextlookup.ContextLookup property) (msticpy.context.lookup.Lookup property) (msticpy.context.tilookup.TILookup property) az_connect() (in module msticpy.auth.azure_auth) az_connect_core() (in module msticpy.auth.azure_auth_core) az_user_connect() (in module msticpy.auth.azure_auth) AzCredentials (class in msticpy.auth.azure_auth_core) AzSTI (class in msticpy.context.tiproviders.azure_sent_byoti) AZURE_CLIENT_CERTIFICATE_PASSWORD (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) AZURE_CLIENT_CERTIFICATE_PATH (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) AZURE_CLIENT_ID (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) AZURE_CLIENT_SECRET (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) AZURE_CLIENT_SEND_CERTIFICATE_CHAIN (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) azure_name (msticpy.init.azure_synapse_tools.LinkedService property) AZURE_PASSWORD (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) AZURE_TENANT_ID (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) AZURE_USERNAME (msticpy.auth.azure_auth_core.AzureCredEnvNames attribute) AzureBlobFS (msticpy.init.azure_synapse_tools.LinkedService.ServiceTypes attribute) AzureBlobStorage (class in msticpy.data.storage.azure_blob_storage) (msticpy.init.azure_synapse_tools.LinkedService.ServiceTypes attribute) AzureCliStatus (class in msticpy.auth.azure_auth_core) AzureCloudConfig (class in msticpy.auth.cloud_mappings) AzureCredEnvNames (class in msticpy.auth.azure_auth_core) AzureDataExplorer (msticpy.data.core.query_defns.DataEnvironment attribute) AzureFileStorage (msticpy.init.azure_synapse_tools.LinkedService.ServiceTypes attribute) AzureID (msticpy.datamodel.entities.host.Host attribute) AzureKeyVault (msticpy.init.azure_synapse_tools.LinkedService.ServiceTypes attribute) AzureKustoDriver (class in msticpy.data.drivers.azure_kusto_driver) AzureMonitorDriver (class in msticpy.data.drivers.azure_monitor_driver) AzureNetwork (msticpy.data.core.query_defns.DataFamily attribute) AzureResource (class in msticpy.datamodel.entities.azure_resource) AzureSentinel (msticpy.data.core.query_defns.DataEnvironment attribute) AzureSqlDW (msticpy.init.azure_synapse_tools.LinkedService.ServiceTypes attribute)

B

b64extract() (msticpy.init.mp_pandas_accessors.MsticpyCoreAccessor method) B64ExtractAccessor (class in msticpy.transform.base64unpack) BAD_FORMAT (msticpy.context.lookup_result.LookupStatus attribute) batch_delimiter (msticpy.context.vtlookupv3.vtlookup.VTParams attribute) batch_size (msticpy.context.vtlookupv3.vtlookup.VTParams attribute) BHKeyVaultClient (class in msticpy.auth.keyvault_client) BHKeyVaultMgmtClient (class in msticpy.auth.keyvault_client) BinaryEdge (class in msticpy.context.tiproviders.binaryedge) BinaryRecord (class in msticpy.transform.base64unpack) bit_length() (msticpy.nbwidgets.core.TimeUnit method) blank_schema_dict() (msticpy.transform.proc_tree_schema.ProcSchema class method) blobs() (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) BodyFingerprintBin1 (msticpy.datamodel.entities.mail_message.MailMessage attribute) BodyFingerprintBin2 (msticpy.datamodel.entities.mail_message.MailMessage attribute) BodyFingerprintBin3 (msticpy.datamodel.entities.mail_message.MailMessage attribute) BodyFingerprintBin4 (msticpy.datamodel.entities.mail_message.MailMessage attribute) BodyFingerprintBin5 (msticpy.datamodel.entities.mail_message.MailMessage attribute) bokeh_figure() (in module msticpy.vis.figure_dimension) bool_filters (msticpy.vis.data_viewer.DataTableFilter property) border_layout() (msticpy.config.comp_edit.CEItemsBase static method) (msticpy.config.comp_edit.CompEditDisplayMixin static method) (msticpy.config.comp_edit.CompEditFrame static method) (msticpy.config.comp_edit.CompEditItems static method) (msticpy.config.comp_edit.CompEditSimple static method) (msticpy.config.file_browser.FileBrowser static method) (msticpy.config.mp_config_file.MpConfigFile static method)

box_layout() (in module msticpy.config.query_editor) browse() (msticpy.context.contextlookup.ContextLookup class method) (msticpy.context.lookup.Lookup class method) (msticpy.context.tilookup.TILookup class method) (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior method) (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) browse_for_file() (msticpy.config.mp_config_file.MpConfigFile method) browse_queries() (in module msticpy.vis.query_browser) (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) browse_results() (in module msticpy.vis.ti_browser) (msticpy.context.contextlookup.ContextLookup class method) (msticpy.context.lookup.Lookup class method) (msticpy.context.tilookup.TILookup class method) build() (msticpy.vis.process_tree.ProcessTreeAccessor method) build_and_show_process_tree() (in module msticpy.vis.process_tree) build_proc_tree() (in module msticpy.transform.proc_tree_builder) build_process_tree() (in module msticpy.transform.proc_tree_builder) (msticpy.init.mp_pandas_accessors.MsticpyCoreAccessor method)

C

calc_auto_plot_height() (in module msticpy.vis.timeline_common) camelcase_property_names() (in module msticpy.datamodel.entities.entity) can_iterate (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) can_merge() (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) caption (msticpy.analysis.observationlist.Observation attribute) Category (msticpy.datamodel.entities.malware.Malware attribute) CEItemsBase (class in msticpy.config.comp_edit) center_map() (msticpy.vis.foliummap.FoliumMap method) CERTIFICATE (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) changed_data (msticpy.config.query_editor.MetadataEditWidget property) (msticpy.config.query_editor.QueryEditWidget property) (msticpy.config.query_editor.QueryParameterEditWidget property) char_ord_score() (in module msticpy.analysis.eventcluster) char_ord_score_df() (in module msticpy.analysis.eventcluster) check() (msticpy.context.preprocess_observable.PreProcessor method) check_aml_settings() (in module msticpy.init.azure_ml_tools) check_and_install_missing_packages() (in module msticpy.common.utility.package) check_cli_credentials() (in module msticpy.auth.azure_auth_core) check_df_columns() (in module msticpy.vis.timeline_common) check_kwarg() (in module msticpy.common.utility.types) check_kwargs() (in module msticpy.common.utility.types) check_masking() (in module msticpy.data.data_obfus) check_mp_ver() (in module msticpy.init.azure_ml_tools) check_obfuscation() (in module msticpy.data.data_obfus) check_py_version() (in module msticpy.common.utility.package) check_python_ver() (in module msticpy.init.azure_ml_tools) check_version() (in module msticpy.common.check_version) check_versions() (in module msticpy.init.azure_ml_tools) checked_kwargs() (in module msticpy.common.utility.types) children (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) City (msticpy.datamodel.entities.geo_location.GeoLocation attribute) CLAMAV (msticpy.context.tiproviders.mblookup.MBEntityType attribute) clear() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) clear_keyring() (in module msticpy.common.provider_settings) clear_keyring_secrets() (msticpy.auth.secret_settings.SecretsClient method) clear_status() (msticpy.config.comp_edit.CEItemsBase method) (msticpy.config.comp_edit.CompEditFrame method) (msticpy.config.comp_edit.CompEditItems method) (msticpy.config.comp_edit.CompEditSimple method) (msticpy.config.comp_edit.CompEditStatusMixin method) (msticpy.config.mp_config_file.MpConfigFile method) CLI_NEEDS_SIGN_IN (msticpy.auth.azure_auth_core.AzureCliStatus attribute) CLI_NOT_INSTALLED (msticpy.auth.azure_auth_core.AzureCliStatus attribute) CLI_OK (msticpy.auth.azure_auth_core.AzureCliStatus attribute) CLI_TOKEN_EXPIRED (msticpy.auth.azure_auth_core.AzureCliStatus attribute) CLI_UNKNOWN_ERROR (msticpy.auth.azure_auth_core.AzureCliStatus attribute) CLIENT_ID (msticpy.auth.keyvault_settings.KeyVaultSettings attribute) (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) CLIENT_SEC (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) cloud (msticpy.auth.keyvault_settings.KeyVaultSettings property) cloud_names (msticpy.auth.cloud_mappings.AzureCloudConfig property) CloudApplication (class in msticpy.datamodel.entities.cloud_application) CloudLogonSession (class in msticpy.datamodel.entities.cloud_logon_session) cluster (msticpy.data.core.query_template.QueryMetadata attribute) (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) CLUSTER (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) (msticpy.data.drivers.azure_kusto_driver.QuerySourceFields attribute) cluster_auditd_processes() (in module msticpy.analysis.cluster_auditd) cluster_config_name (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) cluster_groups (msticpy.data.core.query_template.QueryMetadata attribute) (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) CLUSTER_GROUPS (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) (msticpy.data.drivers.azure_kusto_driver.QuerySourceFields attribute) cluster_name (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) cluster_syslog_logons_df() (in module msticpy.analysis.syslog_utils) cluster_uri (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) ClusterGroup (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) ClusterQueryEndTime (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) ClusterQueryStartTime (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) clusters (msticpy.data.core.query_template.QueryMetadata attribute) CLUSTERS (msticpy.data.drivers.azure_kusto_driver.QuerySourceFields attribute) ClusterSourceIdentifier (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) ClusterSourceType (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) Cmd (class in msticpy.analysis.anomalous_sequence.utils.data_structures) cmd_line (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) (msticpy.transform.proc_tree_schema.ProcSchema attribute) cmd_speed() (in module msticpy.transform.cmd_line) cmds_only (msticpy.analysis.anomalous_sequence.model.SessionType attribute) cmds_params_only (msticpy.analysis.anomalous_sequence.model.SessionType attribute) cmds_params_values (msticpy.analysis.anomalous_sequence.model.SessionType attribute) code_connect_str (msticpy.common.wsconfig.WorkspaceConfig property) CODESIGNISSUER (msticpy.context.tiproviders.mblookup.MBEntityType attribute) CODESIGNSN (msticpy.context.tiproviders.mblookup.MBEntityType attribute) CODESIGNSUBJECT (msticpy.context.tiproviders.mblookup.MBEntityType attribute) collapse_dicts() (in module msticpy.common.utility.types) ColNames (class in msticpy.transform.proc_tree_schema) color (msticpy.vis.matrix_plot.PlotParams attribute) (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) column (msticpy.vis.data_viewer.FilterExpr attribute) column_map (msticpy.transform.proc_tree_schema.ProcSchema property) ColumnNames (class in msticpy.context.vtlookupv3.vtlookupv3) columns (msticpy.transform.proc_tree_schema.ProcSchema property) CommandLine (msticpy.datamodel.entities.process.Process attribute) comment (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep attribute) (msticpy.init.pivot_core.pivot_pipeline.PipelineStep attribute) comp_regex (msticpy.transform.iocextract.IoCPattern attribute) CompEditDisplayMixin (class in msticpy.config.comp_edit) CompEditFrame (class in msticpy.config.comp_edit) CompEditHelp (class in msticpy.config.comp_edit) CompEditItemButtons (class in msticpy.config.comp_edit) CompEditItems (class in msticpy.config.comp_edit) CompEditSimple (class in msticpy.config.comp_edit) CompEditStatusMixin (class in msticpy.config.comp_edit) CompEditTabs (class in msticpy.config.comp_edit) CompEditUtilsMixin (class in msticpy.config.comp_edit) CompromisedEntity (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) compute_cmds_probs() (in module msticpy.analysis.anomalous_sequence.utils.probabilities) compute_counts() (in module msticpy.analysis.anomalous_sequence.utils.cmds_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_values) compute_geomean_lik_of_sessions() (msticpy.analysis.anomalous_sequence.model.Model method) compute_likelihood_window() (in module msticpy.analysis.anomalous_sequence.utils.cmds_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_values) compute_likelihood_windows_in_session() (in module msticpy.analysis.anomalous_sequence.utils.cmds_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_values) compute_likelihoods_of_sessions() (msticpy.analysis.anomalous_sequence.model.Model method) compute_params_probs() (in module msticpy.analysis.anomalous_sequence.utils.probabilities) compute_prob_setofparams_given_cmd() (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_values) compute_rarest_windows() (msticpy.analysis.anomalous_sequence.model.Model method) compute_scores() (msticpy.analysis.anomalous_sequence.model.Model method) compute_setof_params_cond_cmd() (msticpy.analysis.anomalous_sequence.model.Model method) compute_values_probs() (in module msticpy.analysis.anomalous_sequence.utils.probabilities) computer (msticpy.datamodel.entities.host.Host property) (msticpy.datamodel.entities.Machine property) (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) CONF_ARGS (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_ARGS_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_RES_GROUP (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_RES_GROUP_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_SUB_ID (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_SUB_ID_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_TENANT_ID (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_TENANT_ID_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_WS_ID (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_WS_ID_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) CONF_WS_NAME (msticpy.common.wsconfig.WorkspaceConfig attribute)

CONF_WS_NAME_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) Confidence (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) config_loaded (msticpy.common.wsconfig.WorkspaceConfig property) CONFIG_NAME (msticpy.data.drivers.cybereason_driver.CybereasonDriver attribute) (msticpy.data.drivers.mdatp_driver.MDATPDriver attribute) (msticpy.data.drivers.odata_driver.OData attribute) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver attribute) config_path (msticpy.init.azure_synapse_tools.MPSparkUtils property) ConfigId (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) ConfigType (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) configured_clusters (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) configured_providers (msticpy.context.contextlookup.ContextLookup property) (msticpy.context.lookup.Lookup property) (msticpy.context.tilookup.TILookup property) conjugate() (msticpy.nbwidgets.core.TimeUnit method) connect() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver method) (msticpy.data.drivers.driver_base.DriverBase method) (msticpy.data.drivers.elastic_driver.ElasticDriver method) (msticpy.data.drivers.kql_driver.KqlDriver method) (msticpy.data.drivers.kusto_driver.KustoDriver method) (msticpy.data.drivers.local_data_driver.LocalDataDriver method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver method) (msticpy.data.drivers.mdatp_driver.MDATPDriver method) (msticpy.data.drivers.mordor_driver.MordorDriver method) (msticpy.data.drivers.odata_driver.OData method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver method) (msticpy.data.drivers.splunk_driver.SplunkDriver method) (msticpy.data.drivers.sumologic_driver.SumologicDriver method) (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) (msticpy.data.uploaders.splunk_uploader.SplunkUploader method) connected (msticpy.data.core.data_providers.QueryProvider property) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin property) (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) (msticpy.data.drivers.cybereason_driver.CybereasonDriver property) (msticpy.data.drivers.driver_base.DriverBase property) (msticpy.data.drivers.elastic_driver.ElasticDriver property) (msticpy.data.drivers.kql_driver.KqlDriver property) (msticpy.data.drivers.kusto_driver.KustoDriver property) (msticpy.data.drivers.local_data_driver.LocalDataDriver property) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver property) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver property) (msticpy.data.drivers.mdatp_driver.MDATPDriver property) (msticpy.data.drivers.mordor_driver.MordorDriver property) (msticpy.data.drivers.odata_driver.OData property) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver property) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver property) (msticpy.data.drivers.splunk_driver.SplunkDriver property) (msticpy.data.drivers.sumologic_driver.SumologicDriver property) connection_string (msticpy.data.core.data_providers.QueryProvider property) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin property) container (msticpy.init.azure_synapse_tools.SynapseName attribute) containers() (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) ContextLookup (class in msticpy.context.contextlookup) ContextObject (class in msticpy.datamodel.entities.entity) ContextProvider (class in msticpy.context.contextproviders.context_provider_base) contributors (msticpy.data.drivers.mordor_driver.MordorEntry attribute) convert_mde_schema_to_internal() (in module msticpy.transform.proc_tree_build_mde) convert_to_ip_entities() (in module msticpy.context.ip_utils) coordinates (msticpy.datamodel.entities.geo_location.GeoLocation property) copy() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) Count (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) count() (msticpy.context.lookup_result.SanitizedObservable method) (msticpy.context.tiproviders.pulsedive.PDQuery method) (msticpy.context.tiproviders.result_severity.LookupResult method) (msticpy.context.vtlookupv3.vtlookup.DuplicateStatus method) (msticpy.context.vtlookupv3.vtlookup.VTParams method) (msticpy.data.core.query_provider_utils_mixin.QueryParam method) (msticpy.data.drivers.azure_kusto_driver.AuthParams method) (msticpy.data.sql_to_kql.FuncFormat method) (msticpy.init.logging.LoggingConfig method) (msticpy.init.mp_plugins.PluginReg method) (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep method) (msticpy.init.pivot_init.pivot_data_queries.ParamAttrs method) (msticpy.init.pivot_init.pivot_data_queries.PivQuerySettings method) (msticpy.init.pivot_init.pivot_data_queries.QueryParams method) (msticpy.transform.base64unpack.BinaryRecord method) (msticpy.transform.process_tree_utils.TemplateLine method) (msticpy.vis.data_viewer.FilterExpr method) (msticpy.vis.process_tree.TreeResult method) CountByDeliveryStatus (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) CountByProtectionStatus (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) CountByThreatType (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) CountryCode (msticpy.datamodel.entities.geo_location.GeoLocation attribute) CountryName (msticpy.datamodel.entities.geo_location.GeoLocation property) CountryOrRegionName (msticpy.datamodel.entities.geo_location.GeoLocation attribute) crc32_hash() (in module msticpy.analysis.eventcluster) crc32_hash_df() (in module msticpy.analysis.eventcluster) create() (msticpy.datamodel.entities.account.Account class method) (msticpy.datamodel.entities.alert.Alert class method) (msticpy.datamodel.entities.azure_resource.AzureResource class method) (msticpy.datamodel.entities.cloud_application.CloudApplication class method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession class method) (msticpy.datamodel.entities.dns.Dns class method) (msticpy.datamodel.entities.entity.Entity class method) (msticpy.datamodel.entities.file.File class method) (msticpy.datamodel.entities.file_hash.FileHash class method) (msticpy.datamodel.entities.geo_location.GeoLocation class method) (msticpy.datamodel.entities.host.Host class method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession class method) (msticpy.datamodel.entities.iot_device.IoTDevice class method) (msticpy.datamodel.entities.Ip class method) (msticpy.datamodel.entities.ip_address.IpAddress class method) (msticpy.datamodel.entities.Machine class method) (msticpy.datamodel.entities.mail_cluster.MailCluster class method) (msticpy.datamodel.entities.mail_message.MailMessage class method) (msticpy.datamodel.entities.mailbox.Mailbox class method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration class method) (msticpy.datamodel.entities.malware.Malware class method) (msticpy.datamodel.entities.network_connection.NetworkConnection class method) (msticpy.datamodel.entities.oauth_application.OAuthApplication class method) (msticpy.datamodel.entities.process.Process class method) (msticpy.datamodel.entities.registry_key.RegistryKey class method) (msticpy.datamodel.entities.registry_value.RegistryValue class method) (msticpy.datamodel.entities.security_group.SecurityGroup class method) (msticpy.datamodel.entities.service_principal.ServicePrincipal class method) (msticpy.datamodel.entities.submission_mail.SubmissionMail class method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence class method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity class method) (msticpy.datamodel.entities.url.Url class method) (msticpy.datamodel.entities.User class method) (msticpy.datamodel.soc.incident.Incident class method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert class method) create_alert_graph() (in module msticpy.nbtools.security_alert_graph) create_container() (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) create_data_grouping() (in module msticpy.vis.timeline_common) create_doc_string() (msticpy.data.core.query_source.QuerySource method) create_feature_sub_group_of_marker_cluster() (msticpy.vis.foliummap.FoliumMap static method) create_host_record() (in module msticpy.analysis.syslog_utils) create_ip_record() (in module msticpy.context.ip_utils) create_marker() (msticpy.vis.foliummap.FoliumMap static method) create_marker_cluster() (msticpy.vis.foliummap.FoliumMap static method) create_new_cluster_with_geohashes() (msticpy.vis.foliummap.FoliumMap method) create_new_cluster_with_locations() (msticpy.vis.foliummap.FoliumMap method) create_new_subgroup_with_geohashes() (msticpy.vis.foliummap.FoliumMap method) create_new_subgroup_with_locations() (msticpy.vis.foliummap.FoliumMap method) create_param (msticpy.data.core.data_providers.QueryProvider attribute) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin attribute) create_pivot_func() (in module msticpy.init.pivot_core.pivot_register) create_query() (msticpy.data.core.query_source.QuerySource method) create_range_tool() (in module msticpy.vis.timeline_common) create_session_col() (in module msticpy.analysis.anomalous_sequence.sessionize) create_shortcut (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) create_ti_pivot_funcs() (in module msticpy.init.pivot_init.pivot_ti_provider) create_time_period_kqlfilter() (in module msticpy.analysis.timeseries) create_tool_tips() (in module msticpy.vis.timeline_common) create_vault() (msticpy.auth.keyvault_client.BHKeyVaultMgmtClient method) create_vt_graph() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) creation_date (msticpy.data.drivers.mordor_driver.MordorEntry attribute) CreationTimeUtc (msticpy.datamodel.entities.process.Process attribute) CredentialWrapper (class in msticpy.auth.cred_wrapper) CrowdSec (class in msticpy.context.tiproviders.crowdsec) current (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions attribute) current() (msticpy.common.utility.types.SingletonArgsClass method) (msticpy.common.utility.types.SingletonClass method) current_col (msticpy.vis.data_viewer.DataTableFilter property) current_config_path() (in module msticpy.common.pkg_config) current_connection (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) current_file (msticpy.config.mp_config_file.MpConfigFile property) (msticpy.config.query_editor.QueryEditor property) current_mounts() (in module msticpy.init.azure_synapse_tools) cust_arg_fmt (msticpy.data.sql_to_kql.FuncFormat attribute) cust_func_format (msticpy.data.sql_to_kql.FuncFormat attribute) custom_details (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) CUSTOM_PROVIDERS (msticpy.context.contextlookup.ContextLookup attribute) (msticpy.context.lookup.Lookup attribute) (msticpy.context.tilookup.TILookup attribute) CustomChange (class in msticpy.config.query_editor) Cybereason (msticpy.data.core.query_defns.DataEnvironment attribute) (msticpy.data.core.query_defns.DataFamily attribute) CybereasonDriver (class in msticpy.data.drivers.cybereason_driver)

D

data (msticpy.analysis.observationlist.Observation attribute) (msticpy.analysis.polling_detection.PeriodogramPollingDetector attribute) (msticpy.context.http_provider.APILookupParams attribute) (msticpy.context.tiproviders.pulsedive.PDQuery attribute) data_environment (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) data_environments (msticpy.data.core.query_template.QueryMetadata attribute) DATA_ENVS (msticpy.data.drivers.azure_kusto_driver.QuerySourceFields attribute) data_families (msticpy.data.core.query_source.QuerySource property) (msticpy.data.core.query_store.QueryStore attribute) (msticpy.data.core.query_template.QueryMetadata attribute) DATA_FAMILIES (msticpy.data.drivers.azure_kusto_driver.QuerySourceFields attribute) data_family (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) data_source (msticpy.data.core.query_template.QueryMetadata attribute) data_type (msticpy.analysis.observationlist.Observation attribute) (msticpy.data.core.query_provider_utils_mixin.QueryParam attribute) database (msticpy.data.core.query_template.QueryMetadata attribute) DataEnvironment (class in msticpy.data.core.query_defns) DataFamily (class in msticpy.data.core.query_defns) dataframe_columns (msticpy.vis.data_viewer.DataTableColumnChooser property) (msticpy.vis.data_viewer_panel.DataTableColumnChooser property) datasets (msticpy.data.drivers.mordor_driver.MordorEntry attribute) datatable_columns (msticpy.vis.data_viewer.DataTableColumnChooser property) DataTableColumnChooser (class in msticpy.vis.data_viewer) (class in msticpy.vis.data_viewer_panel) DataTableFilter (class in msticpy.vis.data_viewer) datatype (msticpy.data.core.query_template.QueryParameter attribute) DataViewer (class in msticpy.vis.data_viewer_panel) DataViewerBokeh (class in msticpy.vis.data_viewer) DATETIME (msticpy.data.core.query_defns.Formatters attribute) DAY (msticpy.nbwidgets.core.TimeUnit attribute) dbcluster_events() (in module msticpy.analysis.eventcluster) decode_geo_hash() (in module msticpy.vis.foliummap) decode_geohash_collection() (in module msticpy.vis.foliummap) decoded_string (msticpy.transform.base64unpack.BinaryRecord attribute) decrement() (msticpy.context.lookup.ProgressCounter method) DEF_HELP_URI (msticpy.common.exceptions.MsticpyAzureConfigError attribute) (msticpy.common.exceptions.MsticpyAzureConnectionError attribute) (msticpy.common.exceptions.MsticpyConnectionError attribute) (msticpy.common.exceptions.MsticpyDataQueryError attribute) (msticpy.common.exceptions.MsticpyImportExtraError attribute) (msticpy.common.exceptions.MsticpyKeyVaultConfigError attribute) (msticpy.common.exceptions.MsticpyKeyVaultMissingSecretError attribute) (msticpy.common.exceptions.MsticpyKqlConnectionError attribute) (msticpy.common.exceptions.MsticpyMissingDependencyError attribute) (msticpy.common.exceptions.MsticpyNoDataSourceError attribute) (msticpy.common.exceptions.MsticpyNotConnectedError attribute) (msticpy.common.exceptions.MsticpyParameterError attribute) (msticpy.common.exceptions.MsticpyUserConfigError attribute) (msticpy.common.exceptions.MsticpyUserError attribute) (msticpy.context.tiproviders.riskiq.RiskIQAPIUserError attribute) (msticpy.context.tiproviders.riskiq.RiskIQUserError attribute) (msticpy.transform.proc_tree_schema.ProcessTreeSchemaException attribute) defang_ioc() (in module msticpy.common.utility.format) default (msticpy.data.core.query_provider_utils_mixin.QueryParam attribute) (msticpy.data.core.query_template.QueryParameter attribute) (msticpy.data.sql_to_kql.FuncFormat attribute) Default (msticpy.datamodel.entities.entity_enums.ElevationToken attribute) default_auth_methods() (in module msticpy.auth.cloud_mappings) default_before_after() (in module msticpy.nbwidgets.core) default_config_file (msticpy.config.mp_config_file.MpConfigFile property) default_db (msticpy.data.drivers.azure_kusto_driver.KustoConfig property) default_max_buffer() (in module msticpy.nbwidgets.core) default_params (msticpy.data.core.query_source.QuerySource property) default_reqd_widget (msticpy.config.query_editor.QueryParameterEditWidget attribute) defaults (msticpy.data.core.query_template.QueryCollection attribute) DEFAULTS (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) defaults() (msticpy.data.drivers.driver_base.DriverProps class method) del_pivot_shortcut() (msticpy.datamodel.entities.account.Account class method) (msticpy.datamodel.entities.alert.Alert class method) (msticpy.datamodel.entities.azure_resource.AzureResource class method) (msticpy.datamodel.entities.cloud_application.CloudApplication class method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession class method) (msticpy.datamodel.entities.dns.Dns class method) (msticpy.datamodel.entities.entity.Entity class method) (msticpy.datamodel.entities.file.File class method) (msticpy.datamodel.entities.file_hash.FileHash class method) (msticpy.datamodel.entities.geo_location.GeoLocation class method) (msticpy.datamodel.entities.host.Host class method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession class method) (msticpy.datamodel.entities.iot_device.IoTDevice class method) (msticpy.datamodel.entities.Ip class method) (msticpy.datamodel.entities.ip_address.IpAddress class method) (msticpy.datamodel.entities.Machine class method) (msticpy.datamodel.entities.mail_cluster.MailCluster class method) (msticpy.datamodel.entities.mail_message.MailMessage class method) (msticpy.datamodel.entities.mailbox.Mailbox class method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration class method) (msticpy.datamodel.entities.malware.Malware class method) (msticpy.datamodel.entities.network_connection.NetworkConnection class method) (msticpy.datamodel.entities.oauth_application.OAuthApplication class method) (msticpy.datamodel.entities.process.Process class method) (msticpy.datamodel.entities.registry_key.RegistryKey class method) (msticpy.datamodel.entities.registry_value.RegistryValue class method) (msticpy.datamodel.entities.security_group.SecurityGroup class method) (msticpy.datamodel.entities.service_principal.ServicePrincipal class method) (msticpy.datamodel.entities.submission_mail.SubmissionMail class method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence class method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity class method) (msticpy.datamodel.entities.url.Url class method) (msticpy.datamodel.entities.User class method) (msticpy.datamodel.soc.incident.Incident class method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert class method) delayed_import() (in module msticpy.common.utility.package) delete_blob() (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) delete_parameter() (msticpy.config.query_editor.QueryParameterEditWidget method) delete_query() (msticpy.config.query_editor.QueryEditWidget method) delete_secret() (msticpy.auth.keyring_client.KeyringClient method) delim_count() (in module msticpy.analysis.eventcluster) delim_count_df() (in module msticpy.analysis.eventcluster) delim_hash() (in module msticpy.analysis.eventcluster) DeliveryAction (msticpy.datamodel.entities.mail_message.MailMessage attribute) DeliveryLocation (msticpy.datamodel.entities.mail_message.MailMessage attribute) denominator (msticpy.nbwidgets.core.TimeUnit attribute) description (msticpy.analysis.observationlist.Observation attribute) (msticpy.common.provider_settings.ProviderSettings attribute) (msticpy.data.core.query_provider_utils_mixin.QueryParam attribute) (msticpy.data.core.query_source.QuerySource property) (msticpy.data.core.query_template.Query attribute) (msticpy.data.core.query_template.QueryMetadata attribute) (msticpy.data.core.query_template.QueryParameter attribute) (msticpy.data.drivers.mordor_driver.MordorEntry attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) description_str (msticpy.datamodel.entities.account.Account property) (msticpy.datamodel.entities.alert.Alert property) (msticpy.datamodel.entities.azure_resource.AzureResource property) (msticpy.datamodel.entities.cloud_application.CloudApplication property) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession property) (msticpy.datamodel.entities.dns.Dns property) (msticpy.datamodel.entities.entity.Entity property) (msticpy.datamodel.entities.file.File property) (msticpy.datamodel.entities.file_hash.FileHash property) (msticpy.datamodel.entities.geo_location.GeoLocation property) (msticpy.datamodel.entities.host.Host property) (msticpy.datamodel.entities.host_logon_session.HostLogonSession property) (msticpy.datamodel.entities.iot_device.IoTDevice property) (msticpy.datamodel.entities.Ip property) (msticpy.datamodel.entities.ip_address.IpAddress property) (msticpy.datamodel.entities.Machine property) (msticpy.datamodel.entities.mail_cluster.MailCluster property) (msticpy.datamodel.entities.mail_message.MailMessage property) (msticpy.datamodel.entities.mailbox.Mailbox property) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration property) (msticpy.datamodel.entities.malware.Malware property) (msticpy.datamodel.entities.network_connection.NetworkConnection property) (msticpy.datamodel.entities.oauth_application.OAuthApplication property) (msticpy.datamodel.entities.process.Process property) (msticpy.datamodel.entities.registry_key.RegistryKey property) (msticpy.datamodel.entities.registry_value.RegistryValue property) (msticpy.datamodel.entities.security_group.SecurityGroup property) (msticpy.datamodel.entities.service_principal.ServicePrincipal property) (msticpy.datamodel.entities.submission_mail.SubmissionMail property) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence property) (msticpy.datamodel.entities.unknown_entity.UnknownEntity property) (msticpy.datamodel.entities.url.Url property) (msticpy.datamodel.entities.User property) (msticpy.datamodel.soc.incident.Incident property) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property)

description_widget (msticpy.config.query_editor.QueryParameterEditWidget attribute) DestinationAddress (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) DestinationPort (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) details (msticpy.context.tiproviders.result_severity.LookupResult attribute) detect_polling() (msticpy.analysis.polling_detection.PeriodogramPollingDetector method) DETECTIONS (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) DetonationVerdict (msticpy.datamodel.entities.url.Url attribute) DeviceId (msticpy.datamodel.entities.iot_device.IoTDevice attribute) DeviceName (msticpy.datamodel.entities.host.Host attribute) (msticpy.datamodel.entities.iot_device.IoTDevice attribute) (msticpy.datamodel.entities.Machine attribute) DeviceType (msticpy.datamodel.entities.iot_device.IoTDevice attribute) DF_AT (msticpy.transform.iocextract.IoCExtract attribute) df_has_data() (in module msticpy.common.data_utils) df_lookup_ip() (msticpy.context.geoip.GeoIpLookup method) (msticpy.context.geoip.IPStackLookup method) df_to_dynamic_summaries() (in module msticpy.context.azure.sentinel_dynamic_summary_types) (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary static method) df_to_dynamic_summary() (in module msticpy.context.azure.sentinel_dynamic_summary_types) (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary static method) df_to_networkx() (in module msticpy.transform.network) DHASH (msticpy.context.tiproviders.mblookup.MBEntityType attribute) direct_func_entities (msticpy.init.pivot_init.pivot_data_queries.PivQuerySettings attribute) Directory (msticpy.datamodel.entities.file.File attribute) disable_provider() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.lookup.Lookup method) (msticpy.context.tilookup.TILookup method) display() (msticpy.analysis.observationlist.Observation method) (msticpy.config.query_editor.IPyDisplayMixin method) (msticpy.config.query_editor.MetadataEditWidget method) (msticpy.config.query_editor.QueryEditor method) (msticpy.config.query_editor.QueryEditWidget method) (msticpy.config.query_editor.QueryParameterEditWidget method) (msticpy.init.pivot_core.pivot_browser.PivotBrowser method) (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) (msticpy.nbwidgets.core.IPyDisplayMixin method) (msticpy.nbwidgets.get_environment_key.GetEnvironmentKey method) (msticpy.nbwidgets.get_text.GetText method) (msticpy.nbwidgets.lookback.Lookback method) (msticpy.nbwidgets.option_buttons.OptionButtons method) (msticpy.nbwidgets.progress.Progress method) (msticpy.nbwidgets.query_time.QueryTime method) (msticpy.nbwidgets.select_alert.AlertSelector method) (msticpy.nbwidgets.select_alert.SelectAlert method) (msticpy.nbwidgets.select_item.SelectItem method) (msticpy.nbwidgets.select_item.SelectString method) (msticpy.nbwidgets.select_subset.SelectSubset method) (msticpy.vis.data_viewer.DataTableColumnChooser method) (msticpy.vis.data_viewer.DataTableFilter method) (msticpy.vis.data_viewer.DataViewerBokeh method) (msticpy.vis.data_viewer_panel.DataTableColumnChooser method) (msticpy.vis.data_viewer_panel.DataViewer method) (msticpy.vis.morph_charts.MorphCharts method) (msticpy.vis.vtobject_browser.VTObjectBrowser method) display_alert() (in module msticpy.vis.nbdisplay) display_async() (msticpy.nbwidgets.option_buttons.OptionButtons method) display_exception() (msticpy.common.exceptions.MsticpyAzureConfigError method) (msticpy.common.exceptions.MsticpyAzureConnectionError method) (msticpy.common.exceptions.MsticpyConnectionError method) (msticpy.common.exceptions.MsticpyDataQueryError method) (msticpy.common.exceptions.MsticpyImportExtraError method) (msticpy.common.exceptions.MsticpyKeyVaultConfigError method) (msticpy.common.exceptions.MsticpyKeyVaultMissingSecretError method) (msticpy.common.exceptions.MsticpyKqlConnectionError method) (msticpy.common.exceptions.MsticpyMissingDependencyError method) (msticpy.common.exceptions.MsticpyNoDataSourceError method) (msticpy.common.exceptions.MsticpyNotConnectedError method) (msticpy.common.exceptions.MsticpyParameterError method) (msticpy.common.exceptions.MsticpyUserConfigError method) (msticpy.common.exceptions.MsticpyUserError method) (msticpy.context.tiproviders.riskiq.RiskIQAPIUserError method) (msticpy.context.tiproviders.riskiq.RiskIQUserError method) (msticpy.transform.proc_tree_schema.ProcessTreeSchemaException method) display_html() (in module msticpy.vis.code_view) display_logon_data() (in module msticpy.vis.nbdisplay) display_observations() (msticpy.analysis.observationlist.Observations method) display_timeline() (in module msticpy.vis.timeline) display_timeline_duration() (in module msticpy.vis.timeline_duration) display_timeline_values() (in module msticpy.vis.timeline_values) display_timeseries_anomalies() (in module msticpy.vis.timeseries) display_timeseries_anomolies() (in module msticpy.vis.timeseries) DisplayName (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) dist_count (msticpy.vis.matrix_plot.PlotParams attribute) DistinguishedName (msticpy.datamodel.entities.security_group.SecurityGroup attribute) Dns (class in msticpy.datamodel.entities.dns) dns (msticpy.transform.iocextract.IoCType attribute) dns_components() (in module msticpy.context.domain_utils) DNS_DF_REGEX (msticpy.transform.iocextract.IoCExtract attribute) DNS_REGEX (msticpy.transform.iocextract.IoCExtract attribute) dns_resolve() (in module msticpy.context.domain_utils) dns_resolve_df() (in module msticpy.context.domain_utils) DnsDomain (msticpy.datamodel.entities.host.Host attribute) DnsServerIp (msticpy.datamodel.entities.dns.Dns attribute) DocsRagMagic (class in msticpy.aiagents.mp_docs_rag_magic) DOMAIN (msticpy.context.vtlookupv3.vtlookupv3.VTEntityType attribute) DomainName (msticpy.datamodel.entities.dns.Dns attribute) DomainValidator (class in msticpy.context.domain_utils) download_and_write_sentinel_queries() (in module msticpy.data.drivers.sentinel_query_reader) download_mdr_file() (in module msticpy.data.drivers.mordor_driver) download_sample() (msticpy.context.tiproviders.mblookup.MBlookup method) draw_alert_entity_graph() (in module msticpy.vis.nbdisplay) driver_class (msticpy.data.core.data_providers.QueryProvider attribute) (msticpy.data.core.query_provider_connections_mixin.QueryProviderConnectionsMixin attribute) (msticpy.data.core.query_provider_connections_mixin.QueryProviderProtocol attribute) driver_help() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) driver_queries (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) (msticpy.data.drivers.cybereason_driver.CybereasonDriver property) (msticpy.data.drivers.driver_base.DriverBase property) (msticpy.data.drivers.elastic_driver.ElasticDriver property) (msticpy.data.drivers.kql_driver.KqlDriver property) (msticpy.data.drivers.kusto_driver.KustoDriver property) (msticpy.data.drivers.local_data_driver.LocalDataDriver property) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver property) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver property) (msticpy.data.drivers.mdatp_driver.MDATPDriver property) (msticpy.data.drivers.mordor_driver.MordorDriver property) (msticpy.data.drivers.odata_driver.OData property) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver property) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver property) (msticpy.data.drivers.splunk_driver.SplunkDriver property) (msticpy.data.drivers.sumologic_driver.SumologicDriver property) DriverBase (class in msticpy.data.drivers.driver_base) DriverProps (class in msticpy.data.drivers.driver_base) DuplicateStatus (class in msticpy.context.vtlookupv3.vtlookup) DynamicSummary (class in msticpy.context.azure.sentinel_dynamic_summary_types) DynamicSummaryItem (class in msticpy.context.azure.sentinel_dynamic_summary_types)

E

Edge (class in msticpy.datamodel.entities.entity_graph) edges (msticpy.datamodel.entities.file.File attribute) (msticpy.datamodel.entities.file_hash.FileHash attribute) (msticpy.datamodel.entities.geo_location.GeoLocation attribute) (msticpy.datamodel.entities.host.Host attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.entities.iot_device.IoTDevice attribute) (msticpy.datamodel.entities.ip_address.IpAddress attribute) (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) (msticpy.datamodel.entities.malware.Malware attribute) (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) (msticpy.datamodel.entities.process.Process attribute) (msticpy.datamodel.entities.registry_key.RegistryKey attribute) (msticpy.datamodel.entities.registry_value.RegistryValue attribute) (msticpy.datamodel.entities.security_group.SecurityGroup attribute) (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) (msticpy.datamodel.entities.unknown_entity.UnknownEntity attribute) (msticpy.datamodel.entities.url.Url attribute) (msticpy.datamodel.soc.incident.Incident attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) EFFECTIVE_ENV (msticpy.data.drivers.driver_base.DriverProps attribute) EffectiveLogonId (msticpy.transform.proc_tree_schema.ColNames attribute) EffectiveLogonId_par (msticpy.transform.proc_tree_schema.ColNames attribute) Elastic (msticpy.data.core.query_defns.DataEnvironment attribute) (msticpy.data.core.query_defns.DataFamily attribute) ElasticDriver (class in msticpy.data.drivers.elastic_driver) ElevationToken (class in msticpy.datamodel.entities.entity_enums) (msticpy.datamodel.entities.process.Process attribute) email (msticpy.transform.iocextract.IoCType attribute) EMAIL_DF_REGEX (msticpy.transform.iocextract.IoCExtract attribute) EMAIL_REGEX (msticpy.transform.iocextract.IoCExtract attribute) EMAIL_USER_REGEX (msticpy.transform.iocextract.IoCExtract attribute) enable_layer_control() (msticpy.vis.foliummap.FoliumMap method) enable_provider() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.lookup.Lookup method) (msticpy.context.tilookup.TILookup method) encoding_type (msticpy.transform.base64unpack.BinaryRecord attribute) end (msticpy.common.timespan.TimeSpan property) (msticpy.nbwidgets.query_time.QueryTime property) EndTimeUtc (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) ensure_df_datetimes() (in module msticpy.common.data_utils) Entities (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) entities (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) Entity (class in msticpy.datamodel.entities.entity) entity (msticpy.init.pivot_core.pivot_pipeline.PipelineStep attribute) entity_classes() (in module msticpy.datamodel.entities) entity_container_name (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) entity_distance() (in module msticpy.context.geoip) entity_map (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) entity_mappings (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) ENTITY_NAME_MAP (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.entities.azure_resource.AzureResource attribute) (msticpy.datamodel.entities.cloud_application.CloudApplication attribute) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession attribute) (msticpy.datamodel.entities.dns.Dns attribute) (msticpy.datamodel.entities.entity.Entity attribute) (msticpy.datamodel.entities.file.File attribute) (msticpy.datamodel.entities.file_hash.FileHash attribute) (msticpy.datamodel.entities.geo_location.GeoLocation attribute) (msticpy.datamodel.entities.host.Host attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.entities.iot_device.IoTDevice attribute) (msticpy.datamodel.entities.Ip attribute) (msticpy.datamodel.entities.ip_address.IpAddress attribute) (msticpy.datamodel.entities.Machine attribute) (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) (msticpy.datamodel.entities.malware.Malware attribute) (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) (msticpy.datamodel.entities.process.Process attribute) (msticpy.datamodel.entities.registry_key.RegistryKey attribute) (msticpy.datamodel.entities.registry_value.RegistryValue attribute) (msticpy.datamodel.entities.security_group.SecurityGroup attribute) (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) (msticpy.datamodel.entities.unknown_entity.UnknownEntity attribute) (msticpy.datamodel.entities.url.Url attribute) (msticpy.datamodel.entities.User attribute) (msticpy.datamodel.soc.incident.Incident attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute)

EntityGraph (class in msticpy.vis.entity_graph_tools) enum_parse() (in module msticpy.common.utility.types) environment (msticpy.data.core.data_providers.QueryProvider property) (msticpy.data.core.query_store.QueryStore attribute) escape_windows_path() (in module msticpy.common.utility.format) event_filter (msticpy.transform.proc_tree_schema.ProcSchema property) event_id_column (msticpy.transform.proc_tree_schema.ProcSchema attribute) event_id_identifier (msticpy.transform.proc_tree_schema.ProcSchema attribute) event_time_utc (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) event_type_col (msticpy.transform.proc_tree_schema.ProcSchema property) exec_query() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_connections_mixin.QueryProviderConnectionsMixin method) exec_remaining_cells() (in module msticpy.vis.nbdisplay) EXPLORE (msticpy.context.tiproviders.pulsedive.PDEntityType attribute) explore() (msticpy.context.tiproviders.pulsedive.PDlookup method) export() (in module msticpy.common.utility.types) expr (msticpy.vis.data_viewer.FilterExpr attribute) ExternalDirectoryObjectId (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) extract() (msticpy.transform.base64unpack.B64ExtractAccessor method) (msticpy.transform.iocextract.IoCExtract method) (msticpy.transform.iocextract.IoCExtractAccessor method) extract_anomaly_periods() (in module msticpy.analysis.timeseries) extract_df() (msticpy.transform.iocextract.IoCExtract method) extract_events_to_df() (in module msticpy.transform.auditdextract) extract_process_tree() (in module msticpy.transform.proc_tree_build_mde) (in module msticpy.transform.proc_tree_build_winlx) extract_query_params() (in module msticpy.data.core.param_extractor)

F

fallback_devicecode_creds() (in module msticpy.auth.azure_auth) FallbackProperty (class in msticpy.common.data_types) family (msticpy.init.pivot_init.pivot_data_queries.ParamAttrs attribute) field_list() (msticpy.vis.matrix_plot.PlotParams class method) (msticpy.vis.timeline.PlotParams class method) (msticpy.vis.timeline_duration.PlotParams class method) (msticpy.vis.timeline_values.PlotParams class method) FieldList (class in msticpy.context.azure.sentinel_dynamic_summary_types) fields (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary attribute) (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) (msticpy.vis.mordor_browser.MordorBrowser property) File (class in msticpy.datamodel.entities.file) FILE (msticpy.context.vtlookupv3.vtlookupv3.VTEntityType attribute) File (msticpy.datamodel.entities.malware.Malware attribute) file_hash (msticpy.datamodel.entities.file.File property) (msticpy.transform.iocextract.IoCType attribute) file_hash_type() (msticpy.transform.iocextract.IoCExtract static method) file_hashes (msticpy.transform.base64unpack.BinaryRecord attribute) file_name (msticpy.data.core.query_template.QueryCollection attribute) (msticpy.transform.base64unpack.BinaryRecord attribute) file_type (msticpy.transform.base64unpack.BinaryRecord attribute) FileBrowser (class in msticpy.config.file_browser) FileHash (class in msticpy.datamodel.entities.file_hash) FileHashes (msticpy.datamodel.entities.file.File attribute) files (msticpy.data.drivers.mordor_driver.MordorEntry attribute) Files (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.malware.Malware attribute) FILETYPE (msticpy.context.tiproviders.mblookup.MBEntityType attribute) filter (msticpy.analysis.observationlist.Observation attribute) filter() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) filter_cols() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) FILTER_ON_CONNECT (msticpy.data.drivers.driver_base.DriverProps attribute) filtered_data (msticpy.analysis.observationlist.Observation property) (msticpy.vis.data_viewer.DataViewerBokeh property) filtered_dataframe (msticpy.vis.data_viewer.DataTableFilter property) FilterExpr (class in msticpy.vis.data_viewer) filters (msticpy.vis.data_viewer.DataViewerBokeh property) find_anomaly_periods() (in module msticpy.analysis.timeseries) find_entity() (in module msticpy.datamodel.entities) find_query() (msticpy.data.core.query_store.QueryStore method)

find_rst_files() (in module msticpy.aiagents.rag_agents) find_yaml_files() (in module msticpy.data.core.data_query_reader) fmt_title (msticpy.vis.timeline.PlotParams property) folder_name (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) FolderPath (msticpy.datamodel.entities.file.File attribute) folium_map (msticpy.vis.foliummap.FoliumMap attribute) folium_map() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) FoliumMap (class in msticpy.vis.foliummap) font_size (msticpy.vis.matrix_plot.PlotParams attribute) format_alert() (in module msticpy.vis.nbdisplay) format_endpoint() (in module msticpy.auth.cloud_mappings) format_kv_name() (msticpy.auth.secret_settings.SecretsClient static method) format_logon() (in module msticpy.vis.nbdisplay) format_powershell() (in module msticpy.analysis.code_cleanup) Formatters (class in msticpy.data.core.query_defns) FORMATTERS (msticpy.data.drivers.driver_base.DriverProps attribute) fqdn (msticpy.datamodel.entities.host.Host property) (msticpy.datamodel.entities.Machine property) from_bytes() (msticpy.nbwidgets.core.TimeUnit method) from_connection_string() (msticpy.common.wsconfig.WorkspaceConfig class method) from_json() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary class method) from_settings() (msticpy.common.wsconfig.WorkspaceConfig class method) from_yaml() (msticpy.init.pivot_core.pivot_pipeline.Pipeline class method) fromkeys() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict class method) (msticpy.common.provider_settings.ProviderArgs class method) fs_mounts (msticpy.init.azure_synapse_tools.MPSparkUtils property) Full (msticpy.datamodel.entities.entity_enums.ElevationToken attribute) full_required (msticpy.init.pivot_init.pivot_data_queries.QueryParams attribute) full_url (msticpy.context.http_provider.APILookupParams attribute) FullName (msticpy.datamodel.entities.host.Host property) (msticpy.datamodel.entities.Machine property) FullPath (msticpy.datamodel.entities.file.File attribute) func_df_col_param_name (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) func_df_param_name (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) func_input_value_arg (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) func_new_name (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) func_out_column_name (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) func_static_params (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) FuncFormat (class in msticpy.data.sql_to_kql) function (msticpy.init.pivot_core.pivot_pipeline.PipelineStep attribute)

G

generate_items() (in module msticpy.context.provider_base) generate_process_tree() (in module msticpy.transform.auditdextract) geo_distance() (in module msticpy.context.geoip) GeoIPDatabaseError GeoIpLookup (class in msticpy.context.geoip) GeoLocation (class in msticpy.datamodel.entities.geo_location) get() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.auth.keyvault_settings.KeyVaultSettings method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) (msticpy.common.wsconfig.WorkspaceConfig method) get_all_entities() (msticpy.nbtools.security_alert.SecurityAlert method) (msticpy.nbtools.security_base.SecurityBase method) (msticpy.nbtools.security_event.SecurityEvent method) get_all_services_of_type() (msticpy.init.azure_synapse_tools.MPSparkUtils method) get_aml_user_folder() (in module msticpy.init.azure_ml_tools) get_ancestors() (in module msticpy.transform.process_tree_utils) get_asn_details() (in module msticpy.context.ip_utils) get_asn_from_ip() (in module msticpy.context.ip_utils) get_asn_from_name() (in module msticpy.context.ip_utils) get_attacks() (msticpy.data.drivers.mordor_driver.MordorEntry method) get_autogen_config_from_msticpyconfig() (in module msticpy.aiagents.config_utils) get_azure_config_value() (in module msticpy.auth.cloud_mappings) get_blob() (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) get_center_geo_locs() (in module msticpy.vis.foliummap) get_center_ip_entities() (in module msticpy.vis.foliummap) get_chart_details() (msticpy.vis.morph_charts.MorphCharts method) get_children() (in module msticpy.transform.process_tree_utils) get_cloud_endpoints() (in module msticpy.auth.cloud_mappings) get_cloud_endpoints_by_cloud() (in module msticpy.auth.cloud_mappings) get_cloud_endpoints_by_resource_manager_url() (in module msticpy.auth.cloud_mappings) get_cluster_name() (in module msticpy.data.drivers.azure_kusto_driver) get_color_palette() (in module msticpy.vis.timeline_common) get_config() (in module msticpy.common.pkg_config) get_cscb() (msticpy.context.tiproviders.mblookup.MBlookup method) get_database_names() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) get_database_schema() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) get_def_source_cols() (in module msticpy.vis.timeline_common) get_default_resource_name() (in module msticpy.auth.azure_auth) get_defender_endpoint() (in module msticpy.auth.cloud_mappings) get_descendents() (in module msticpy.transform.process_tree_utils) get_df_cols() (msticpy.transform.proc_tree_schema.ProcSchema method) get_driver_property() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver method) (msticpy.data.drivers.driver_base.DriverBase method) (msticpy.data.drivers.elastic_driver.ElasticDriver method) (msticpy.data.drivers.kql_driver.KqlDriver method) (msticpy.data.drivers.kusto_driver.KustoDriver method) (msticpy.data.drivers.local_data_driver.LocalDataDriver method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver method) (msticpy.data.drivers.mdatp_driver.MDATPDriver method) (msticpy.data.drivers.mordor_driver.MordorDriver method) (msticpy.data.drivers.odata_driver.OData method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver method) (msticpy.data.drivers.splunk_driver.SplunkDriver method) (msticpy.data.drivers.sumologic_driver.SumologicDriver method) get_entities_of_type() (msticpy.nbtools.security_alert.SecurityAlert method) (msticpy.nbtools.security_base.SecurityBase method) (msticpy.nbtools.security_event.SecurityEvent method) get_event_subset() (in module msticpy.transform.auditdextract) get_exec_step() (msticpy.init.pivot_core.pivot_pipeline.PipelineStep method) get_file_behavior() (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior method) (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) get_file_paths() (msticpy.data.drivers.mordor_driver.MordorEntry method) get_folder_list() (msticpy.config.file_browser.FileBrowser method) get_hashes() (in module msticpy.transform.base64unpack) get_http_proxies() (in module msticpy.common.proxy_settings) get_http_timeout() (in module msticpy.common.pkg_config) (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver static method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver static method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver static method) (msticpy.data.drivers.driver_base.DriverBase static method) (msticpy.data.drivers.elastic_driver.ElasticDriver static method) (msticpy.data.drivers.kql_driver.KqlDriver static method) (msticpy.data.drivers.kusto_driver.KustoDriver static method) (msticpy.data.drivers.local_data_driver.LocalDataDriver static method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver static method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver static method) (msticpy.data.drivers.mdatp_driver.MDATPDriver static method) (msticpy.data.drivers.mordor_driver.MordorDriver static method) (msticpy.data.drivers.odata_driver.OData static method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver static method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver static method) (msticpy.data.drivers.splunk_driver.SplunkDriver static method) (msticpy.data.drivers.sumologic_driver.SumologicDriver static method) (msticpy.data.uploaders.loganalytics_uploader.LAUploader static method) (msticpy.data.uploaders.splunk_uploader.SplunkUploader static method) (msticpy.data.uploaders.uploader_base.UploaderBase static method) get_ioc_type() (msticpy.transform.iocextract.IoCExtract method) get_ip_type() (in module msticpy.context.ip_utils) get_items_from_gzip() (in module msticpy.transform.base64unpack) get_items_from_tar() (in module msticpy.transform.base64unpack) get_items_from_zip() (in module msticpy.transform.base64unpack) get_join_params() (in module msticpy.init.pivot_core.pivot_register) get_kv_secret() (msticpy.init.azure_synapse_tools.MPSparkUtils method) get_logon_id() (msticpy.nbtools.security_alert.SecurityAlert method) (msticpy.nbtools.security_base.SecurityBase method) (msticpy.nbtools.security_event.SecurityEvent method)

get_m365d_endpoint() (in module msticpy.auth.cloud_mappings) get_m365d_login_endpoint() (in module msticpy.auth.cloud_mappings) get_map_center() (in module msticpy.vis.foliummap) get_mdr_data_paths() (in module msticpy.data.drivers.mordor_driver) get_notebooks() (msticpy.data.drivers.mordor_driver.MordorEntry method) get_object() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) get_param_attrs() (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions method) get_params() (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions method) get_params_to_model_values() (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_values) get_parent() (in module msticpy.transform.process_tree_utils) get_pivot_list() (msticpy.datamodel.entities.account.Account class method) (msticpy.datamodel.entities.alert.Alert class method) (msticpy.datamodel.entities.azure_resource.AzureResource class method) (msticpy.datamodel.entities.cloud_application.CloudApplication class method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession class method) (msticpy.datamodel.entities.dns.Dns class method) (msticpy.datamodel.entities.entity.Entity class method) (msticpy.datamodel.entities.file.File class method) (msticpy.datamodel.entities.file_hash.FileHash class method) (msticpy.datamodel.entities.geo_location.GeoLocation class method) (msticpy.datamodel.entities.host.Host class method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession class method) (msticpy.datamodel.entities.iot_device.IoTDevice class method) (msticpy.datamodel.entities.Ip class method) (msticpy.datamodel.entities.ip_address.IpAddress class method) (msticpy.datamodel.entities.Machine class method) (msticpy.datamodel.entities.mail_cluster.MailCluster class method) (msticpy.datamodel.entities.mail_message.MailMessage class method) (msticpy.datamodel.entities.mailbox.Mailbox class method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration class method) (msticpy.datamodel.entities.malware.Malware class method) (msticpy.datamodel.entities.network_connection.NetworkConnection class method) (msticpy.datamodel.entities.oauth_application.OAuthApplication class method) (msticpy.datamodel.entities.process.Process class method) (msticpy.datamodel.entities.registry_key.RegistryKey class method) (msticpy.datamodel.entities.registry_value.RegistryValue class method) (msticpy.datamodel.entities.security_group.SecurityGroup class method) (msticpy.datamodel.entities.service_principal.ServicePrincipal class method) (msticpy.datamodel.entities.submission_mail.SubmissionMail class method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence class method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity class method) (msticpy.datamodel.entities.url.Url class method) (msticpy.datamodel.entities.User class method) (msticpy.datamodel.soc.incident.Incident class method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert class method) get_process() (in module msticpy.transform.process_tree_utils) get_process_key() (in module msticpy.transform.process_tree_utils) get_protected_setting() (in module msticpy.common.provider_settings) get_provider_settings() (in module msticpy.common.provider_settings) get_queries_and_types_for_param() (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions method) get_queries_for_param() (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions method) get_query() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) (msticpy.data.core.query_store.QueryStore method) get_query_pivot_settings() (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions method) get_query_settings() (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions method) get_recent() (msticpy.context.tiproviders.mblookup.MBlookup method) get_ref_event_time() (in module msticpy.vis.timeline_common) get_remaining() (msticpy.context.lookup.ProgressCounter method) get_retrieval_assistant_agent() (in module msticpy.aiagents.rag_agents) get_retrieval_user_proxy_agent() (in module msticpy.aiagents.rag_agents) get_root() (in module msticpy.transform.process_tree_utils) get_root_tree() (in module msticpy.transform.process_tree_utils) get_roots() (in module msticpy.transform.process_tree_utils) get_sas_token() (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) get_schema_and_host() (in module msticpy.context.preprocess_observable) get_secret() (msticpy.auth.keyring_client.KeyringClient method) (msticpy.auth.keyvault_client.BHKeyVaultClient method) get_secret_accessor() (msticpy.auth.secret_settings.SecretsClient method) get_secrets_client_func() (in module msticpy.common.provider_settings) get_sentinel_queries_from_github() (in module msticpy.data.drivers.sentinel_query_reader) get_service() (msticpy.init.azure_synapse_tools.MPSparkUtils method) get_service_of_type() (msticpy.init.azure_synapse_tools.MPSparkUtils method) get_settings() (in module msticpy.common.pkg_config) get_siblings() (in module msticpy.transform.process_tree_utils) get_storage_service() (msticpy.init.azure_synapse_tools.MPSparkUtils method) get_summary_info() (in module msticpy.transform.process_tree_utils) get_tenant_authority_host() (msticpy.auth.keyvault_settings.KeyVaultSettings method) get_tenant_authority_uri() (msticpy.auth.keyvault_settings.KeyVaultSettings method) get_ti_select_options() (in module msticpy.vis.ti_browser) get_tick_formatter() (in module msticpy.vis.timeline_common) get_time_bounds() (in module msticpy.vis.timeline_common) get_token() (msticpy.auth.msal_auth.MSALDelegatedAuth method) get_tree_depth() (in module msticpy.transform.process_tree_utils) get_vault_uri() (msticpy.auth.keyvault_client.BHKeyVaultMgmtClient method) get_whois_df() (in module msticpy.context.ip_utils) get_whois_info() (in module msticpy.context.ip_utils) get_workspace_from_url() (msticpy.config.mp_config_file.MpConfigFile static method) get_ws_default_storage() (msticpy.init.azure_synapse_tools.MPSparkUtils method) GetEnvironmentKey (class in msticpy.nbwidgets.get_environment_key) GetText (class in msticpy.nbwidgets.get_text) GIMPHASH (msticpy.context.tiproviders.mblookup.MBEntityType attribute) graph (msticpy.vis.entity_graph_tools.EntityGraph property) graph_property() (in module msticpy.datamodel.entities.graph_property) GreyNoise (class in msticpy.context.tiproviders.greynoise) group (msticpy.transform.iocextract.IoCPattern attribute) group_by (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute)

H

has_behavior_data (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior property) has_config() (in module msticpy.common.pkg_config) HAS_DRIVER_QUERIES (msticpy.data.drivers.driver_base.DriverProps attribute) has_edge() (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.entity_graph.Node method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) has_evtx (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior property) has_memdump (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior property) has_pcap (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior property) HASH (msticpy.context.tiproviders.mblookup.MBEntityType attribute) hash_account() (in module msticpy.data.data_obfus) hash_dict() (in module msticpy.data.data_obfus) hash_ip() (in module msticpy.data.data_obfus) hash_item() (in module msticpy.data.data_obfus) hash_list() (in module msticpy.data.data_obfus) hash_sid() (in module msticpy.data.data_obfus) hash_string() (in module msticpy.data.data_obfus) headers (msticpy.context.http_provider.APILookupParams attribute) (msticpy.context.vtlookupv3.vtlookup.VTParams attribute) height (msticpy.vis.matrix_plot.PlotParams attribute) (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) help() (msticpy.data.core.query_source.QuerySource method) help_uri (msticpy.common.exceptions.MsticpyAzureConfigError property) (msticpy.common.exceptions.MsticpyAzureConnectionError property) (msticpy.common.exceptions.MsticpyConnectionError property) (msticpy.common.exceptions.MsticpyDataQueryError property) (msticpy.common.exceptions.MsticpyImportExtraError property) (msticpy.common.exceptions.MsticpyKeyVaultConfigError property) (msticpy.common.exceptions.MsticpyKeyVaultMissingSecretError property) (msticpy.common.exceptions.MsticpyKqlConnectionError property) (msticpy.common.exceptions.MsticpyMissingDependencyError property) (msticpy.common.exceptions.MsticpyNoDataSourceError property) (msticpy.common.exceptions.MsticpyNotConnectedError property) (msticpy.common.exceptions.MsticpyParameterError property) (msticpy.common.exceptions.MsticpyUserConfigError property) (msticpy.common.exceptions.MsticpyUserError property) (msticpy.context.tiproviders.riskiq.RiskIQAPIUserError property) (msticpy.context.tiproviders.riskiq.RiskIQUserError property) (msticpy.transform.proc_tree_schema.ProcessTreeSchemaException property)

hide (msticpy.vis.matrix_plot.PlotParams attribute) (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) hide() (msticpy.nbwidgets.progress.Progress method) high (msticpy.context.tiproviders.result_severity.ResultSeverity attribute) HIGH_SEVERITY (msticpy.context.tiproviders.abuseipdb.AbuseIPDB attribute) (msticpy.context.tiproviders.crowdsec.CrowdSec attribute) (msticpy.context.tiproviders.ibm_xforce.XForce attribute) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore attribute) Hive (msticpy.datamodel.entities.registry_key.RegistryKey attribute) HKEY_A (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_CLASSES_ROOT (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_CURRENT_CONFIG (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_CURRENT_USER (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_CURRENT_USER_LOCAL_SETTINGS (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_LOCAL_MACHINE (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_PERFORMANCE_DATA (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_PERFORMANCE_NLSTEXT (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_PERFORMANCE_TEXT (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) HKEY_USERS (msticpy.datamodel.entities.entity_enums.RegistryHive attribute) Host (class in msticpy.datamodel.entities.host) (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.file.File attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.entities.process.Process attribute) host_filter() (msticpy.nbtools.security_alert.SecurityAlert method) (msticpy.nbtools.security_base.SecurityBase method) (msticpy.nbtools.security_event.SecurityEvent method) host_name (msticpy.transform.proc_tree_schema.ProcSchema property) host_name_column (msticpy.transform.proc_tree_schema.ProcSchema attribute) HostIpAddress (msticpy.datamodel.entities.dns.Dns attribute) HostLogonSession (class in msticpy.datamodel.entities.host_logon_session) HostName (msticpy.datamodel.entities.host.Host attribute) hostname (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) (msticpy.transform.iocextract.IoCType attribute) HOUR (msticpy.nbwidgets.core.TimeUnit attribute) http_verb (msticpy.context.vtlookupv3.vtlookup.VTParams attribute) HttpContextProvider (class in msticpy.context.contextproviders.http_context_provider) HttpProvider (class in msticpy.context.http_provider) HttpTIProvider (class in msticpy.context.tiproviders.ti_http_provider)

I

ID (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) id (msticpy.data.drivers.mordor_driver.MordorEntry attribute) ID_PROPERTIES (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.entities.azure_resource.AzureResource attribute) (msticpy.datamodel.entities.cloud_application.CloudApplication attribute) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession attribute) (msticpy.datamodel.entities.dns.Dns attribute) (msticpy.datamodel.entities.entity.Entity attribute) (msticpy.datamodel.entities.file.File attribute) (msticpy.datamodel.entities.file_hash.FileHash attribute) (msticpy.datamodel.entities.geo_location.GeoLocation attribute) (msticpy.datamodel.entities.host.Host attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.entities.iot_device.IoTDevice attribute) (msticpy.datamodel.entities.Ip attribute) (msticpy.datamodel.entities.ip_address.IpAddress attribute) (msticpy.datamodel.entities.Machine attribute) (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) (msticpy.datamodel.entities.malware.Malware attribute) (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) (msticpy.datamodel.entities.process.Process attribute) (msticpy.datamodel.entities.registry_key.RegistryKey attribute) (msticpy.datamodel.entities.registry_value.RegistryValue attribute) (msticpy.datamodel.entities.security_group.SecurityGroup attribute) (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) (msticpy.datamodel.entities.unknown_entity.UnknownEntity attribute) (msticpy.datamodel.entities.url.Url attribute) (msticpy.datamodel.entities.User attribute) (msticpy.datamodel.soc.incident.Incident attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) identify_outliers() (in module msticpy.analysis.outliers) ids (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) IDS_ATTRIBS (msticpy.nbwidgets.query_time.QueryTime attribute) imag (msticpy.nbwidgets.core.TimeUnit attribute) ImageFile (msticpy.datamodel.entities.process.Process attribute) IMPHASH (msticpy.context.tiproviders.mblookup.MBEntityType attribute) import_driver() (in module msticpy.data.drivers) import_file() (msticpy.data.core.query_store.QueryStore method) import_files() (msticpy.data.core.query_store.QueryStore class method) import_filters() (msticpy.vis.data_viewer.DataTableFilter method) (msticpy.vis.data_viewer.DataViewerBokeh method) import_provider() (msticpy.context.contextlookup.ContextLookup class method) (msticpy.context.lookup.Lookup class method) (msticpy.context.tilookup.TILookup class method) import_query_file() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) import_sentinel_queries() (in module msticpy.data.drivers.sentinel_query_reader) ImportPlaceholder (class in msticpy.common.utility.types) in_abuse_list() (msticpy.context.domain_utils.DomainValidator method) Incident (class in msticpy.datamodel.soc.incident) incident (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) incident_graph() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) index() (msticpy.context.lookup_result.SanitizedObservable method) (msticpy.context.tiproviders.pulsedive.PDQuery method) (msticpy.context.tiproviders.result_severity.LookupResult method) (msticpy.context.vtlookupv3.vtlookup.DuplicateStatus method) (msticpy.context.vtlookupv3.vtlookup.VTParams method) (msticpy.data.core.query_provider_utils_mixin.QueryParam method) (msticpy.data.drivers.azure_kusto_driver.AuthParams method) (msticpy.data.sql_to_kql.FuncFormat method) (msticpy.init.logging.LoggingConfig method) (msticpy.init.mp_plugins.PluginReg method) (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep method) (msticpy.init.pivot_init.pivot_data_queries.ParamAttrs method) (msticpy.init.pivot_init.pivot_data_queries.PivQuerySettings method) (msticpy.init.pivot_init.pivot_data_queries.QueryParams method) (msticpy.transform.base64unpack.BinaryRecord method) (msticpy.transform.process_tree_utils.TemplateLine method) (msticpy.vis.data_viewer.FilterExpr method) (msticpy.vis.process_tree.TreeResult method) INDICATOR (msticpy.context.tiproviders.pulsedive.PDEntityType attribute) infer_schema() (in module msticpy.transform.proc_tree_builder) information (msticpy.context.tiproviders.result_severity.ResultSeverity attribute) init() (in module msticpy.init.pivot_init.vt_pivot) init_dir() (in module msticpy.common.utility.package) init_getattr() (in module msticpy.common.utility.package) init_notebook() (in module msticpy.init.nbinit) init_synapse() (in module msticpy.init.azure_synapse_tools) inject_environment_variable() (in module msticpy.aiagents.config_utils) inject_token_provider_callable() (in module msticpy.aiagents.config_utils) input_bytes (msticpy.transform.base64unpack.BinaryRecord attribute) input_type (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) instance (msticpy.data.core.data_providers.QueryProvider property) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin property) (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) (msticpy.data.drivers.cybereason_driver.CybereasonDriver property) (msticpy.data.drivers.driver_base.DriverBase property) (msticpy.data.drivers.elastic_driver.ElasticDriver property) (msticpy.data.drivers.kql_driver.KqlDriver property) (msticpy.data.drivers.kusto_driver.KustoDriver property) (msticpy.data.drivers.local_data_driver.LocalDataDriver property) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver property) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver property) (msticpy.data.drivers.mdatp_driver.MDATPDriver property) (msticpy.data.drivers.mordor_driver.MordorDriver property) (msticpy.data.drivers.odata_driver.OData property) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver property) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver property) (msticpy.data.drivers.splunk_driver.SplunkDriver property) (msticpy.data.drivers.sumologic_driver.SumologicDriver property) instance_name (msticpy.init.pivot_init.pivot_data_queries.PivotQueryFunctions property) InstanceName (msticpy.datamodel.entities.cloud_application.CloudApplication attribute) instantiate_entity() (msticpy.datamodel.entities.account.Account class method) (msticpy.datamodel.entities.alert.Alert class method) (msticpy.datamodel.entities.azure_resource.AzureResource class method) (msticpy.datamodel.entities.cloud_application.CloudApplication class method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession class method) (msticpy.datamodel.entities.dns.Dns class method) (msticpy.datamodel.entities.entity.Entity class method) (msticpy.datamodel.entities.file.File class method) (msticpy.datamodel.entities.file_hash.FileHash class method) (msticpy.datamodel.entities.geo_location.GeoLocation class method) (msticpy.datamodel.entities.host.Host class method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession class method) (msticpy.datamodel.entities.iot_device.IoTDevice class method) (msticpy.datamodel.entities.Ip class method) (msticpy.datamodel.entities.ip_address.IpAddress class method) (msticpy.datamodel.entities.Machine class method) (msticpy.datamodel.entities.mail_cluster.MailCluster class method) (msticpy.datamodel.entities.mail_message.MailMessage class method) (msticpy.datamodel.entities.mailbox.Mailbox class method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration class method) (msticpy.datamodel.entities.malware.Malware class method) (msticpy.datamodel.entities.network_connection.NetworkConnection class method) (msticpy.datamodel.entities.oauth_application.OAuthApplication class method) (msticpy.datamodel.entities.process.Process class method) (msticpy.datamodel.entities.registry_key.RegistryKey class method) (msticpy.datamodel.entities.registry_value.RegistryValue class method) (msticpy.datamodel.entities.security_group.SecurityGroup class method) (msticpy.datamodel.entities.service_principal.ServicePrincipal class method) (msticpy.datamodel.entities.submission_mail.SubmissionMail class method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence class method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity class method) (msticpy.datamodel.entities.url.Url class method) (msticpy.datamodel.entities.User class method) (msticpy.datamodel.soc.incident.Incident class method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert class method) INTEG_AUTH (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) integrated_auth (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) InternetMessageId (msticpy.datamodel.entities.mail_message.MailMessage attribute) intersect (msticpy.vis.matrix_plot.PlotParams attribute) IntSights (class in msticpy.context.tiproviders.intsights) inv (msticpy.vis.data_viewer.FilterExpr attribute) invert (msticpy.vis.matrix_plot.PlotParams attribute) ioc_df_types (msticpy.transform.iocextract.IoCExtract property) ioc_extract() (msticpy.init.mp_pandas_accessors.MsticpyCoreAccessor method) ioc_query_defs (msticpy.context.tiproviders.abuseipdb.AbuseIPDB property) (msticpy.context.tiproviders.alienvault_otx.OTX property) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI property) (msticpy.context.tiproviders.binaryedge.BinaryEdge property) (msticpy.context.tiproviders.crowdsec.CrowdSec property) (msticpy.context.tiproviders.greynoise.GreyNoise property) (msticpy.context.tiproviders.ibm_xforce.XForce property) (msticpy.context.tiproviders.intsights.IntSights property) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore property) (msticpy.context.tiproviders.kql_base.KqlTIProvider property) (msticpy.context.tiproviders.open_page_rank.OPR property) (msticpy.context.tiproviders.pulsedive.Pulsedive property) (msticpy.context.tiproviders.riskiq.RiskIQ property) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider property) (msticpy.context.tiproviders.ti_provider_base.TIProvider property) (msticpy.context.tiproviders.tor_exit_nodes.Tor property) (msticpy.context.tiproviders.virustotal.VirusTotal property)

ioc_type (msticpy.transform.iocextract.IoCPattern attribute) ioc_types (msticpy.transform.iocextract.IoCExtract property) ioc_vt_type_mapping (msticpy.context.vtlookupv3.vtlookup.VTLookup property) IoCExtract (class in msticpy.transform.iocextract) IoCExtractAccessor (class in msticpy.transform.iocextract) IoCPattern (class in msticpy.transform.iocextract) IoCType (class in msticpy.transform.iocextract) IoTDevice (class in msticpy.datamodel.entities.iot_device) IoTHub (msticpy.datamodel.entities.iot_device.IoTDevice attribute) IoTSecurityAgentId (msticpy.datamodel.entities.iot_device.IoTDevice attribute) Ip (class in msticpy.datamodel.entities) (in module msticpy.datamodel.entities.ip_address) IP_ADDRESS (msticpy.context.vtlookupv3.vtlookupv3.VTEntityType attribute) ip_address (msticpy.datamodel.entities.Ip property) (msticpy.datamodel.entities.ip_address.IpAddress property) ip_rev_resolve() (in module msticpy.context.domain_utils) ip_rev_resolve_df() (in module msticpy.context.domain_utils) ip_whois() (in module msticpy.context.ip_utils) IpAddress (class in msticpy.datamodel.entities.ip_address) (msticpy.datamodel.entities.iot_device.IoTDevice attribute) IpAddresses (msticpy.datamodel.entities.dns.Dns attribute) IPQualityScore (class in msticpy.context.tiproviders.ip_quality_score) IPStackLookup (class in msticpy.context.geoip) ipv4 (msticpy.transform.iocextract.IoCType attribute) IPV4_DF_REGEX (msticpy.transform.iocextract.IoCExtract attribute) IPV4_REGEX (msticpy.transform.iocextract.IoCExtract attribute) ipv6 (msticpy.transform.iocextract.IoCType attribute) IPV6_REGEX (msticpy.transform.iocextract.IoCExtract attribute) IpWhoisAccessor (class in msticpy.context.ip_utils) IPyDisplayMixin (class in msticpy.config.query_editor) (class in msticpy.nbwidgets.core) is_dup (msticpy.context.vtlookupv3.vtlookup.DuplicateStatus attribute) is_equivalent() (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) is_in_aml() (in module msticpy.init.azure_ml_tools) is_in_aml_pyspark() (in module msticpy.init.azure_ml_tools) is_in_azure_sub (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) is_in_log_analytics (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) is_in_synapse() (in module msticpy.init.azure_synapse_tools) is_in_workspace (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) is_ipython() (in module msticpy.common.utility.ipython) is_keyring_available() (msticpy.auth.keyring_client.KeyringClient static method) is_known_type() (msticpy.context.contextproviders.context_provider_base.ContextProvider class method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider class method) (msticpy.context.contextproviders.servicenow.ServiceNow class method) (msticpy.context.http_provider.HttpProvider class method) (msticpy.context.provider_base.Provider class method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB class method) (msticpy.context.tiproviders.alienvault_otx.OTX class method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI class method) (msticpy.context.tiproviders.binaryedge.BinaryEdge class method) (msticpy.context.tiproviders.crowdsec.CrowdSec class method) (msticpy.context.tiproviders.greynoise.GreyNoise class method) (msticpy.context.tiproviders.ibm_xforce.XForce class method) (msticpy.context.tiproviders.intsights.IntSights class method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore class method) (msticpy.context.tiproviders.kql_base.KqlTIProvider class method) (msticpy.context.tiproviders.open_page_rank.OPR class method) (msticpy.context.tiproviders.pulsedive.Pulsedive class method) (msticpy.context.tiproviders.riskiq.RiskIQ class method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider class method) (msticpy.context.tiproviders.ti_provider_base.TIProvider class method) (msticpy.context.tiproviders.tor_exit_nodes.Tor class method) (msticpy.context.tiproviders.virustotal.VirusTotal class method) is_not_empty() (in module msticpy.common.utility.format) is_resolvable() (msticpy.context.domain_utils.DomainValidator static method) is_supported_type() (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) (msticpy.context.http_provider.HttpProvider method) (msticpy.context.provider_base.Provider method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) is_valid_uuid() (in module msticpy.common.utility.format) IsBranch (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) IsDomainJoined (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.host.Host attribute) IsLeaf (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) IsRoot (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) IsVolumeAnomaly (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) item_action (msticpy.nbwidgets.select_item.SelectItem attribute) item_query_defs (msticpy.context.contextproviders.context_provider_base.ContextProvider property) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider property) (msticpy.context.contextproviders.servicenow.ServiceNow property) (msticpy.context.http_provider.HttpProvider property) (msticpy.context.provider_base.Provider property) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB property) (msticpy.context.tiproviders.alienvault_otx.OTX property) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI property) (msticpy.context.tiproviders.binaryedge.BinaryEdge property) (msticpy.context.tiproviders.crowdsec.CrowdSec property) (msticpy.context.tiproviders.greynoise.GreyNoise property) (msticpy.context.tiproviders.ibm_xforce.XForce property) (msticpy.context.tiproviders.intsights.IntSights property) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore property) (msticpy.context.tiproviders.kql_base.KqlTIProvider property) (msticpy.context.tiproviders.open_page_rank.OPR property) (msticpy.context.tiproviders.pulsedive.Pulsedive property) (msticpy.context.tiproviders.riskiq.RiskIQ property) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider property) (msticpy.context.tiproviders.ti_provider_base.TIProvider property) (msticpy.context.tiproviders.tor_exit_nodes.Tor property) (msticpy.context.tiproviders.virustotal.VirusTotal property) items (msticpy.transform.process_tree_utils.TemplateLine attribute) items() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) iterator() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method)

J

job_id (msticpy.init.azure_synapse_tools.MPSparkUtils property) join_result() (in module msticpy.init.pivot_core.pivot_register) JSONEncoder (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.entities.azure_resource.AzureResource attribute) (msticpy.datamodel.entities.cloud_application.CloudApplication attribute) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession attribute) (msticpy.datamodel.entities.dns.Dns attribute) (msticpy.datamodel.entities.entity.Entity attribute) (msticpy.datamodel.entities.file.File attribute) (msticpy.datamodel.entities.file_hash.FileHash attribute) (msticpy.datamodel.entities.geo_location.GeoLocation attribute) (msticpy.datamodel.entities.host.Host attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.entities.iot_device.IoTDevice attribute) (msticpy.datamodel.entities.Ip attribute) (msticpy.datamodel.entities.ip_address.IpAddress attribute) (msticpy.datamodel.entities.Machine attribute) (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) (msticpy.datamodel.entities.malware.Malware attribute) (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) (msticpy.datamodel.entities.process.Process attribute) (msticpy.datamodel.entities.registry_key.RegistryKey attribute) (msticpy.datamodel.entities.registry_value.RegistryValue attribute) (msticpy.datamodel.entities.security_group.SecurityGroup attribute) (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) (msticpy.datamodel.entities.unknown_entity.UnknownEntity attribute) (msticpy.datamodel.entities.url.Url attribute) (msticpy.datamodel.entities.User attribute) (msticpy.datamodel.soc.incident.Incident attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute)

K

Key (msticpy.datamodel.entities.registry_key.RegistryKey attribute) (msticpy.datamodel.entities.registry_value.RegistryValue attribute) key_vault (msticpy.init.azure_synapse_tools.SynapseName property) key_vault_name_prefix (msticpy.init.azure_synapse_tools.SynapseName attribute) KeyringClient (class in msticpy.auth.keyring_client) keys() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) keyvault_uri (msticpy.auth.keyvault_settings.KeyVaultSettings property) KeyVaultSettings (class in msticpy.auth.keyvault_settings) KFields (in module msticpy.data.drivers.azure_kusto_driver) kind (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) (msticpy.vis.timeline_values.PlotParams attribute)

kql_periods() (msticpy.analysis.timeseries.MsticpyTimeSeriesAccessor method) KqlDriver (class in msticpy.data.drivers.kql_driver) KqlTIProvider (class in msticpy.context.tiproviders.kql_base) Kusto (msticpy.data.core.query_defns.DataEnvironment attribute) Kusto_KQLM (msticpy.data.core.query_defns.DataEnvironment attribute) Kusto_Legacy (msticpy.data.core.query_defns.DataEnvironment attribute) Kusto_New (msticpy.data.core.query_defns.DataEnvironment attribute) KustoConfig (class in msticpy.data.drivers.azure_kusto_driver) KustoConfig.ConfigFields (class in msticpy.data.drivers.azure_kusto_driver) KustoDriver (class in msticpy.data.drivers.kusto_driver) kv_linked_service (msticpy.init.azure_synapse_tools.SynapseName attribute)

L

label (msticpy.nbwidgets.select_item.SelectItem property) (msticpy.nbwidgets.select_item.SelectString property) Language (msticpy.datamodel.entities.mail_message.MailMessage attribute) laplace_smooth_cmd_counts() (in module msticpy.analysis.anomalous_sequence.utils.laplace_smooth) laplace_smooth_counts() (in module msticpy.analysis.anomalous_sequence.utils.cmds_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_values) laplace_smooth_param_counts() (in module msticpy.analysis.anomalous_sequence.utils.laplace_smooth) laplace_smooth_value_counts() (in module msticpy.analysis.anomalous_sequence.utils.laplace_smooth) LAST_ANALYSIS_STATS (msticpy.context.vtlookupv3.vtlookupv3.VTObjectProperties attribute) Latitude (msticpy.datamodel.entities.geo_location.GeoLocation attribute) LAUploader (class in msticpy.data.uploaders.loganalytics_uploader) layout (msticpy.config.comp_edit.CompEditHelp property) (msticpy.nbwidgets.get_environment_key.GetEnvironmentKey property) (msticpy.nbwidgets.get_text.GetText property) (msticpy.nbwidgets.lookback.Lookback property) (msticpy.nbwidgets.option_buttons.OptionButtons property) (msticpy.nbwidgets.select_item.SelectItem property) (msticpy.nbwidgets.select_item.SelectString property) lazy_import() (in module msticpy.lazy_importer) legacy (msticpy.auth.azure_auth_core.AzCredentials attribute) legend (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) levels (msticpy.vis.process_tree.TreeResult attribute) Limited (msticpy.datamodel.entities.entity_enums.ElevationToken attribute) link (msticpy.analysis.observationlist.Observation attribute) LinkedService (class in msticpy.init.azure_synapse_tools) LinkedService.ServiceTypes (class in msticpy.init.azure_synapse_tools) links (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) Linux (msticpy.datamodel.entities.entity_enums.OSFamily attribute) linux_path (msticpy.transform.iocextract.IoCType attribute) LinuxSecurity (msticpy.data.core.query_defns.DataFamily attribute) LinuxSyslog (msticpy.data.core.query_defns.DataFamily attribute) LIST (msticpy.data.core.query_defns.Formatters attribute) list_auth_methods() (in module msticpy.auth.azure_auth_core) list_available_providers() (msticpy.context.contextlookup.ContextLookup class method) (msticpy.context.lookup.Lookup class method) (msticpy.context.tilookup.TILookup class method) list_charts() (msticpy.vis.morph_charts.MorphCharts method) list_connections() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_connections_mixin.QueryProviderConnectionsMixin method) list_data_environments() (msticpy.data.core.data_providers.QueryProvider class method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin class method) list_default_imports() (in module msticpy.init.nbinit) list_entities() (in module msticpy.datamodel.entities) list_pivot_funcs() (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) list_pygments_styles() (in module msticpy.vis.code_view) list_queries() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) list_sandboxes() (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior class method) list_to_rows() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) list_vaults() (msticpy.auth.keyvault_client.BHKeyVaultMgmtClient method) list_workspaces() (msticpy.common.wsconfig.WorkspaceConfig class method) load_default() (msticpy.config.mp_config_file.MpConfigFile method) load_from_file() (msticpy.config.mp_config_file.MpConfigFile method) load_ipython_extension() (in module msticpy.aiagents.mp_docs_rag_magic) load_plugins_from_path() (in module msticpy.init.mp_plugins) load_queries_from_yaml() (in module msticpy.config.query_editor) load_user_defaults() (in module msticpy.init.user_config) loaded (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) (msticpy.data.drivers.cybereason_driver.CybereasonDriver property) (msticpy.data.drivers.driver_base.DriverBase property) (msticpy.data.drivers.elastic_driver.ElasticDriver property) (msticpy.data.drivers.kql_driver.KqlDriver property) (msticpy.data.drivers.kusto_driver.KustoDriver property) (msticpy.data.drivers.local_data_driver.LocalDataDriver property) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver property) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver property) (msticpy.data.drivers.mdatp_driver.MDATPDriver property) (msticpy.data.drivers.mordor_driver.MordorDriver property) (msticpy.data.drivers.odata_driver.OData property) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver property) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver property) (msticpy.data.drivers.splunk_driver.SplunkDriver property) (msticpy.data.drivers.sumologic_driver.SumologicDriver property) loaded_providers (msticpy.context.contextlookup.ContextLookup property) (msticpy.context.lookup.Lookup property) (msticpy.context.tilookup.TILookup property) LocalData (msticpy.data.core.query_defns.DataEnvironment attribute) LocalDataDriver (class in msticpy.data.drivers.local_data_driver) Location (msticpy.datamodel.entities.ip_address.IpAddress attribute) log_analytics_uri (msticpy.auth.cloud_mappings.AzureCloudConfig property) log_file (msticpy.init.logging.LoggingConfig attribute) log_level (msticpy.init.logging.LoggingConfig attribute) log_size (msticpy.vis.matrix_plot.PlotParams attribute) LogAnalytics (msticpy.data.core.query_defns.DataEnvironment attribute) LoggingConfig (class in msticpy.init.logging) logon_id (msticpy.transform.proc_tree_schema.ProcSchema attribute) LogonId (msticpy.datamodel.entities.account.Account attribute) LogonSession (msticpy.datamodel.entities.process.Process attribute) Longitude (msticpy.datamodel.entities.geo_location.GeoLocation attribute) Lookback (class in msticpy.nbwidgets.lookback) lookback (msticpy.nbwidgets.lookback.Lookback property) Lookup (class in msticpy.context.lookup) lookup() (msticpy.context.ip_utils.IpWhoisAccessor method) lookup_ioc() (msticpy.context.tilookup.TILookup method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.mblookup.MBlookup method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.PDlookup method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) (msticpy.context.vtlookupv3.vtlookup.VTLookup method) (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method)

lookup_ioc_related() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) lookup_ioc_relationships() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) lookup_iocs() (msticpy.context.tilookup.TILookup method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) (msticpy.context.vtlookupv3.vtlookup.VTLookup method) (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) lookup_iocs_async() (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) lookup_iocs_relationships() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) lookup_iocs_sync() (msticpy.context.tilookup.TILookup method) lookup_ip() (msticpy.context.geoip.GeoIpLookup method) (msticpy.context.geoip.IPStackLookup method) lookup_ips() (msticpy.context.geoip.GeoIpLookup method) (msticpy.context.geoip.IPStackLookup method) lookup_item() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) (msticpy.context.http_provider.HttpProvider method) (msticpy.context.lookup.Lookup method) (msticpy.context.provider_base.Provider method) (msticpy.context.tilookup.TILookup method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) lookup_items() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) (msticpy.context.http_provider.HttpProvider method) (msticpy.context.lookup.Lookup method) (msticpy.context.provider_base.Provider method) (msticpy.context.tilookup.TILookup method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) lookup_items_async() (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) (msticpy.context.http_provider.HttpProvider method) (msticpy.context.provider_base.Provider method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) lookup_items_sync() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.lookup.Lookup method) (msticpy.context.tilookup.TILookup method) lookup_observable() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) lookup_observables() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) lookup_observables_async() (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) lookup_observables_sync() (msticpy.context.contextlookup.ContextLookup method) lookup_threat() (msticpy.context.tiproviders.pulsedive.PDlookup method) LookupResult (class in msticpy.context.tiproviders.result_severity) LookupStatus (class in msticpy.context.lookup_result) LXPATH_REGEX (msticpy.transform.iocextract.IoCExtract attribute) LXSTDPATH_REGEX (msticpy.transform.iocextract.IoCExtract attribute)

M

M365D (msticpy.data.core.query_defns.DataEnvironment attribute) M365DGraph (msticpy.data.core.query_defns.DataEnvironment attribute) MacAddress (msticpy.datamodel.entities.iot_device.IoTDevice attribute) Machine (class in msticpy.datamodel.entities) Mailbox (class in msticpy.datamodel.entities.mailbox) MailboxConfiguration (class in msticpy.datamodel.entities.mailbox_configuration) MailboxPrimaryAddress (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) MailCluster (class in msticpy.datamodel.entities.mail_cluster) MailCount (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) MailMessage (class in msticpy.datamodel.entities.mail_message) make_pivot_shortcut() (msticpy.datamodel.entities.account.Account class method) (msticpy.datamodel.entities.alert.Alert class method) (msticpy.datamodel.entities.azure_resource.AzureResource class method) (msticpy.datamodel.entities.cloud_application.CloudApplication class method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession class method) (msticpy.datamodel.entities.dns.Dns class method) (msticpy.datamodel.entities.entity.Entity class method) (msticpy.datamodel.entities.file.File class method) (msticpy.datamodel.entities.file_hash.FileHash class method) (msticpy.datamodel.entities.geo_location.GeoLocation class method) (msticpy.datamodel.entities.host.Host class method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession class method) (msticpy.datamodel.entities.iot_device.IoTDevice class method) (msticpy.datamodel.entities.Ip class method) (msticpy.datamodel.entities.ip_address.IpAddress class method) (msticpy.datamodel.entities.Machine class method) (msticpy.datamodel.entities.mail_cluster.MailCluster class method) (msticpy.datamodel.entities.mail_message.MailMessage class method) (msticpy.datamodel.entities.mailbox.Mailbox class method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration class method) (msticpy.datamodel.entities.malware.Malware class method) (msticpy.datamodel.entities.network_connection.NetworkConnection class method) (msticpy.datamodel.entities.oauth_application.OAuthApplication class method) (msticpy.datamodel.entities.process.Process class method) (msticpy.datamodel.entities.registry_key.RegistryKey class method) (msticpy.datamodel.entities.registry_value.RegistryValue class method) (msticpy.datamodel.entities.security_group.SecurityGroup class method) (msticpy.datamodel.entities.service_principal.ServicePrincipal class method) (msticpy.datamodel.entities.submission_mail.SubmissionMail class method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence class method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity class method) (msticpy.datamodel.entities.url.Url class method) (msticpy.datamodel.entities.User class method) (msticpy.datamodel.soc.incident.Incident class method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert class method) MALICIOUS (msticpy.context.vtlookupv3.vtlookupv3.VTObjectProperties attribute) Malware (class in msticpy.datamodel.entities.malware) Manufacturer (msticpy.datamodel.entities.iot_device.IoTDevice attribute) map_json_to_mp_ws() (msticpy.config.mp_config_file.MpConfigFile method) mask() (msticpy.data.data_obfus.ObfuscationAccessor method) (msticpy.init.mp_pandas_accessors.MsticpyCoreAccessor method) mask_df() (in module msticpy.data.data_obfus) matrix() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) max (msticpy.nbwidgets.progress.Progress property) max_label_font_size (msticpy.vis.matrix_plot.PlotParams attribute) MAX_PARALLEL (msticpy.data.drivers.driver_base.DriverProps attribute) MBEntityType (class in msticpy.context.tiproviders.mblookup) MBlookup (class in msticpy.context.tiproviders.mblookup) md() (in module msticpy.common.utility.ipython) MD5 (msticpy.datamodel.entities.entity_enums.Algorithm attribute) Md5 (msticpy.datamodel.entities.file.File attribute) md5 (msticpy.transform.base64unpack.BinaryRecord attribute) md5_hash (msticpy.transform.iocextract.IoCType attribute) MD5_REGEX (msticpy.transform.iocextract.IoCExtract attribute) md_error() (in module msticpy.common.utility.ipython) md_warn() (in module msticpy.common.utility.ipython) MDATP (msticpy.data.core.query_defns.DataEnvironment attribute) (msticpy.data.core.query_defns.DataFamily attribute) MDATPDriver (class in msticpy.data.drivers.mdatp_driver) MDE (msticpy.data.core.query_defns.DataEnvironment attribute) MEDIUM_SEVERITY (msticpy.context.tiproviders.crowdsec.CrowdSec attribute) (msticpy.context.tiproviders.ibm_xforce.XForce attribute) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore attribute) merge() (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) metadata (msticpy.data.core.query_source.QuerySource attribute) (msticpy.data.core.query_template.Query attribute) (msticpy.data.core.query_template.QueryCollection attribute) (msticpy.data.core.query_template.QueryDefaults attribute) MetadataEditWidget (class in msticpy.config.query_editor) method (msticpy.data.drivers.azure_kusto_driver.AuthParams attribute) mgmt_uri (msticpy.auth.keyvault_settings.KeyVaultSettings property) MINUTE (msticpy.nbwidgets.core.TimeUnit attribute) MitreAttack (class in msticpy.data.drivers.mordor_driver) Model (class in msticpy.analysis.anomalous_sequence.model) (msticpy.datamodel.entities.iot_device.IoTDevice attribute) modern (msticpy.auth.azure_auth_core.AzCredentials attribute) modification_date (msticpy.data.drivers.mordor_driver.MordorEntry attribute) module msticpy msticpy.aiagents msticpy.aiagents.config_utils msticpy.aiagents.mp_docs_rag_magic msticpy.aiagents.rag_agents msticpy.analysis msticpy.analysis.anomalous_sequence msticpy.analysis.anomalous_sequence.anomalous msticpy.analysis.anomalous_sequence.model msticpy.analysis.anomalous_sequence.sessionize msticpy.analysis.anomalous_sequence.utils msticpy.analysis.anomalous_sequence.utils.cmds_only msticpy.analysis.anomalous_sequence.utils.cmds_params_only msticpy.analysis.anomalous_sequence.utils.cmds_params_values msticpy.analysis.anomalous_sequence.utils.data_structures msticpy.analysis.anomalous_sequence.utils.laplace_smooth msticpy.analysis.anomalous_sequence.utils.probabilities msticpy.analysis.cluster_auditd msticpy.analysis.code_cleanup msticpy.analysis.eventcluster msticpy.analysis.observationlist msticpy.analysis.outliers msticpy.analysis.polling_detection msticpy.analysis.syslog_utils msticpy.analysis.timeseries msticpy.auth msticpy.auth.azure_auth msticpy.auth.azure_auth_core msticpy.auth.cloud_mappings msticpy.auth.cloud_mappings_offline msticpy.auth.cred_wrapper msticpy.auth.keyring_client msticpy.auth.keyvault_client msticpy.auth.keyvault_settings msticpy.auth.msal_auth msticpy.auth.secret_settings msticpy.common msticpy.common.azure_auth msticpy.common.check_version msticpy.common.data_types msticpy.common.data_utils msticpy.common.exceptions msticpy.common.pkg_config msticpy.common.provider_settings msticpy.common.proxy_settings msticpy.common.settings msticpy.common.timespan msticpy.common.utility msticpy.common.utility.format msticpy.common.utility.ipython msticpy.common.utility.package msticpy.common.utility.types msticpy.common.wsconfig msticpy.config msticpy.config.comp_edit msticpy.config.file_browser msticpy.config.mp_config_file msticpy.config.query_editor msticpy.context msticpy.context.azure msticpy.context.azure.sentinel_dynamic_summary_types msticpy.context.contextlookup msticpy.context.contextproviders msticpy.context.contextproviders.context_provider_base msticpy.context.contextproviders.http_context_provider msticpy.context.contextproviders.servicenow msticpy.context.domain_utils msticpy.context.geoip msticpy.context.http_provider msticpy.context.ip_utils msticpy.context.lookup msticpy.context.lookup_result msticpy.context.preprocess_observable msticpy.context.provider_base msticpy.context.tilookup msticpy.context.tiproviders msticpy.context.tiproviders.abuseipdb msticpy.context.tiproviders.alienvault_otx msticpy.context.tiproviders.azure_sent_byoti msticpy.context.tiproviders.binaryedge msticpy.context.tiproviders.crowdsec msticpy.context.tiproviders.greynoise msticpy.context.tiproviders.ibm_xforce msticpy.context.tiproviders.intsights msticpy.context.tiproviders.ip_quality_score msticpy.context.tiproviders.kql_base msticpy.context.tiproviders.mblookup msticpy.context.tiproviders.open_page_rank msticpy.context.tiproviders.pulsedive msticpy.context.tiproviders.result_severity msticpy.context.tiproviders.riskiq msticpy.context.tiproviders.ti_http_provider msticpy.context.tiproviders.ti_provider_base msticpy.context.tiproviders.tor_exit_nodes msticpy.context.tiproviders.virustotal msticpy.context.vtlookupv3 msticpy.context.vtlookupv3.vtfile_behavior msticpy.context.vtlookupv3.vtlookup msticpy.context.vtlookupv3.vtlookupv3 msticpy.data msticpy.data.azure_blob_storage msticpy.data.core msticpy.data.core.data_providers msticpy.data.core.data_query_reader msticpy.data.core.param_extractor msticpy.data.core.query_container msticpy.data.core.query_defns msticpy.data.core.query_provider_connections_mixin msticpy.data.core.query_provider_utils_mixin msticpy.data.core.query_source msticpy.data.core.query_store msticpy.data.core.query_template msticpy.data.data_obfus msticpy.data.data_providers msticpy.data.drivers msticpy.data.drivers.azure_kusto_driver msticpy.data.drivers.azure_monitor_driver msticpy.data.drivers.cybereason_driver msticpy.data.drivers.driver_base msticpy.data.drivers.elastic_driver msticpy.data.drivers.kql_driver msticpy.data.drivers.kusto_driver msticpy.data.drivers.local_data_driver msticpy.data.drivers.local_osquery_driver msticpy.data.drivers.local_velociraptor_driver msticpy.data.drivers.mdatp_driver msticpy.data.drivers.mordor_driver msticpy.data.drivers.odata_driver msticpy.data.drivers.resource_graph_driver msticpy.data.drivers.security_graph_driver msticpy.data.drivers.sentinel_query_reader msticpy.data.drivers.splunk_driver msticpy.data.drivers.sumologic_driver msticpy.data.query_container msticpy.data.query_defns msticpy.data.sql_to_kql msticpy.data.storage msticpy.data.storage.azure_blob_storage msticpy.data.uploaders msticpy.data.uploaders.loganalytics_uploader msticpy.data.uploaders.splunk_uploader msticpy.data.uploaders.uploader_base msticpy.datamodel msticpy.datamodel.entities msticpy.datamodel.entities.account msticpy.datamodel.entities.alert msticpy.datamodel.entities.azure_resource msticpy.datamodel.entities.cloud_application msticpy.datamodel.entities.cloud_logon_session msticpy.datamodel.entities.dns msticpy.datamodel.entities.entity msticpy.datamodel.entities.entity_enums msticpy.datamodel.entities.entity_graph msticpy.datamodel.entities.file msticpy.datamodel.entities.file_hash msticpy.datamodel.entities.geo_location msticpy.datamodel.entities.graph_property msticpy.datamodel.entities.host msticpy.datamodel.entities.host_logon_session msticpy.datamodel.entities.iot_device msticpy.datamodel.entities.ip_address msticpy.datamodel.entities.mail_cluster msticpy.datamodel.entities.mail_message msticpy.datamodel.entities.mailbox msticpy.datamodel.entities.mailbox_configuration msticpy.datamodel.entities.malware msticpy.datamodel.entities.network_connection msticpy.datamodel.entities.oauth_application msticpy.datamodel.entities.process msticpy.datamodel.entities.registry_key msticpy.datamodel.entities.registry_value msticpy.datamodel.entities.security_group msticpy.datamodel.entities.service_principal msticpy.datamodel.entities.submission_mail msticpy.datamodel.entities.threat_intelligence msticpy.datamodel.entities.unknown_entity msticpy.datamodel.entities.url msticpy.datamodel.pivot msticpy.datamodel.soc msticpy.datamodel.soc.incident msticpy.datamodel.soc.sentinel_alert msticpy.init msticpy.init.azure_ml_tools msticpy.init.azure_synapse_tools msticpy.init.logging msticpy.init.mp_pandas_accessors msticpy.init.mp_plugins msticpy.init.nbinit msticpy.init.nbmagics msticpy.init.pivot msticpy.init.pivot_core msticpy.init.pivot_core.pivot_browser msticpy.init.pivot_core.pivot_container msticpy.init.pivot_core.pivot_magic_core msticpy.init.pivot_core.pivot_pd_accessor msticpy.init.pivot_core.pivot_pipeline msticpy.init.pivot_core.pivot_register msticpy.init.pivot_core.pivot_register_reader msticpy.init.pivot_init msticpy.init.pivot_init.pivot_data_queries msticpy.init.pivot_init.pivot_ti_provider msticpy.init.pivot_init.vt_pivot msticpy.init.user_config msticpy.lazy_importer msticpy.nbtools msticpy.nbtools.data_viewer msticpy.nbtools.entityschema msticpy.nbtools.foliummap msticpy.nbtools.morph_charts msticpy.nbtools.nbdisplay msticpy.nbtools.nbwidgets msticpy.nbtools.observationlist msticpy.nbtools.process_tree msticpy.nbtools.security_alert msticpy.nbtools.security_alert_graph msticpy.nbtools.security_base msticpy.nbtools.security_event msticpy.nbtools.ti_browser msticpy.nbtools.timeline msticpy.nbtools.timeline_duration msticpy.nbtools.timeline_pd_accessor msticpy.nbtools.timeseries msticpy.nbtools.utility msticpy.nbtools.wsconfig msticpy.nbwidgets msticpy.nbwidgets.core msticpy.nbwidgets.get_environment_key msticpy.nbwidgets.get_text msticpy.nbwidgets.lookback msticpy.nbwidgets.option_buttons msticpy.nbwidgets.progress msticpy.nbwidgets.query_time msticpy.nbwidgets.select_alert msticpy.nbwidgets.select_item msticpy.nbwidgets.select_subset msticpy.transform msticpy.transform.auditdextract msticpy.transform.base64unpack msticpy.transform.cmd_line msticpy.transform.iocextract msticpy.transform.network msticpy.transform.proc_tree_build_mde msticpy.transform.proc_tree_build_winlx msticpy.transform.proc_tree_builder msticpy.transform.proc_tree_schema msticpy.transform.process_tree_utils msticpy.vis msticpy.vis.code_view msticpy.vis.data_viewer msticpy.vis.data_viewer_panel msticpy.vis.entity_graph_tools msticpy.vis.figure_dimension msticpy.vis.foliummap msticpy.vis.matrix_plot msticpy.vis.mordor_browser msticpy.vis.morph_charts msticpy.vis.mp_pandas_plot msticpy.vis.nbdisplay msticpy.vis.network_plot msticpy.vis.process_tree msticpy.vis.query_browser msticpy.vis.ti_browser msticpy.vis.timeline msticpy.vis.timeline_common msticpy.vis.timeline_duration msticpy.vis.timeline_pd_accessor msticpy.vis.timeline_values msticpy.vis.timeseries msticpy.vis.vtobject_browser Mordor (msticpy.data.core.query_defns.DataEnvironment attribute) MordorBrowser (class in msticpy.vis.mordor_browser) MordorDriver (class in msticpy.data.drivers.mordor_driver) MordorEntry (class in msticpy.data.drivers.mordor_driver) MorphCharts (class in msticpy.vis.morph_charts) mount_container() (in module msticpy.init.azure_synapse_tools) mp_settings (msticpy.common.wsconfig.WorkspaceConfig property) mp_ua_header() (in module msticpy.common.utility.package) MpConfigFile (class in msticpy.config.mp_config_file) MPSparkUtils (class in msticpy.init.azure_synapse_tools) MSALDelegatedAuth (class in msticpy.auth.msal_auth) msg (msticpy.common.exceptions.MsticpyImportExtraError attribute) (msticpy.common.exceptions.MsticpyMissingDependencyError attribute) MSGraph (msticpy.data.core.query_defns.DataEnvironment attribute) MSSentinel (msticpy.data.core.query_defns.DataEnvironment attribute) MSSentinel_KQLM (msticpy.data.core.query_defns.DataEnvironment attribute) MSSentinel_Legacy (msticpy.data.core.query_defns.DataEnvironment attribute) MSSentinel_New (msticpy.data.core.query_defns.DataEnvironment attribute) msticpy module msticpy.aiagents module msticpy.aiagents.config_utils module msticpy.aiagents.mp_docs_rag_magic module msticpy.aiagents.rag_agents module msticpy.analysis module msticpy.analysis.anomalous_sequence module msticpy.analysis.anomalous_sequence.anomalous module msticpy.analysis.anomalous_sequence.model module msticpy.analysis.anomalous_sequence.sessionize module msticpy.analysis.anomalous_sequence.utils module msticpy.analysis.anomalous_sequence.utils.cmds_only module msticpy.analysis.anomalous_sequence.utils.cmds_params_only module msticpy.analysis.anomalous_sequence.utils.cmds_params_values module msticpy.analysis.anomalous_sequence.utils.data_structures module msticpy.analysis.anomalous_sequence.utils.laplace_smooth module msticpy.analysis.anomalous_sequence.utils.probabilities module msticpy.analysis.cluster_auditd module msticpy.analysis.code_cleanup module msticpy.analysis.eventcluster module msticpy.analysis.observationlist module msticpy.analysis.outliers module msticpy.analysis.polling_detection module msticpy.analysis.syslog_utils module msticpy.analysis.timeseries module msticpy.auth module msticpy.auth.azure_auth module msticpy.auth.azure_auth_core module msticpy.auth.cloud_mappings module msticpy.auth.cloud_mappings_offline module msticpy.auth.cred_wrapper module msticpy.auth.keyring_client module msticpy.auth.keyvault_client module msticpy.auth.keyvault_settings module msticpy.auth.msal_auth module msticpy.auth.secret_settings module msticpy.common module msticpy.common.azure_auth module

msticpy.common.check_version module msticpy.common.data_types module msticpy.common.data_utils module msticpy.common.exceptions module msticpy.common.pkg_config module msticpy.common.provider_settings module msticpy.common.proxy_settings module msticpy.common.settings module msticpy.common.timespan module msticpy.common.utility module msticpy.common.utility.format module msticpy.common.utility.ipython module msticpy.common.utility.package module msticpy.common.utility.types module msticpy.common.wsconfig module msticpy.config module msticpy.config.comp_edit module msticpy.config.file_browser module msticpy.config.mp_config_file module msticpy.config.query_editor module msticpy.context module msticpy.context.azure module msticpy.context.azure.sentinel_dynamic_summary_types module msticpy.context.contextlookup module msticpy.context.contextproviders module msticpy.context.contextproviders.context_provider_base module msticpy.context.contextproviders.http_context_provider module msticpy.context.contextproviders.servicenow module msticpy.context.domain_utils module msticpy.context.geoip module msticpy.context.http_provider module msticpy.context.ip_utils module msticpy.context.lookup module msticpy.context.lookup_result module msticpy.context.preprocess_observable module msticpy.context.provider_base module msticpy.context.tilookup module msticpy.context.tiproviders module msticpy.context.tiproviders.abuseipdb module msticpy.context.tiproviders.alienvault_otx module msticpy.context.tiproviders.azure_sent_byoti module msticpy.context.tiproviders.binaryedge module msticpy.context.tiproviders.crowdsec module msticpy.context.tiproviders.greynoise module msticpy.context.tiproviders.ibm_xforce module msticpy.context.tiproviders.intsights module msticpy.context.tiproviders.ip_quality_score module msticpy.context.tiproviders.kql_base module msticpy.context.tiproviders.mblookup module msticpy.context.tiproviders.open_page_rank module msticpy.context.tiproviders.pulsedive module msticpy.context.tiproviders.result_severity module msticpy.context.tiproviders.riskiq module msticpy.context.tiproviders.ti_http_provider module msticpy.context.tiproviders.ti_provider_base module msticpy.context.tiproviders.tor_exit_nodes module msticpy.context.tiproviders.virustotal module msticpy.context.vtlookupv3 module msticpy.context.vtlookupv3.vtfile_behavior module msticpy.context.vtlookupv3.vtlookup module msticpy.context.vtlookupv3.vtlookupv3 module msticpy.data module msticpy.data.azure_blob_storage module msticpy.data.core module msticpy.data.core.data_providers module msticpy.data.core.data_query_reader module msticpy.data.core.param_extractor module msticpy.data.core.query_container module msticpy.data.core.query_defns module msticpy.data.core.query_provider_connections_mixin module msticpy.data.core.query_provider_utils_mixin module msticpy.data.core.query_source module msticpy.data.core.query_store module msticpy.data.core.query_template module msticpy.data.data_obfus module msticpy.data.data_providers module msticpy.data.drivers module msticpy.data.drivers.azure_kusto_driver module msticpy.data.drivers.azure_monitor_driver module msticpy.data.drivers.cybereason_driver module msticpy.data.drivers.driver_base module msticpy.data.drivers.elastic_driver module msticpy.data.drivers.kql_driver module msticpy.data.drivers.kusto_driver module msticpy.data.drivers.local_data_driver module msticpy.data.drivers.local_osquery_driver module msticpy.data.drivers.local_velociraptor_driver module msticpy.data.drivers.mdatp_driver module msticpy.data.drivers.mordor_driver module msticpy.data.drivers.odata_driver module msticpy.data.drivers.resource_graph_driver module msticpy.data.drivers.security_graph_driver module msticpy.data.drivers.sentinel_query_reader module msticpy.data.drivers.splunk_driver module msticpy.data.drivers.sumologic_driver module msticpy.data.query_container module msticpy.data.query_defns module msticpy.data.sql_to_kql module msticpy.data.storage module msticpy.data.storage.azure_blob_storage module msticpy.data.uploaders module msticpy.data.uploaders.loganalytics_uploader module msticpy.data.uploaders.splunk_uploader module msticpy.data.uploaders.uploader_base module msticpy.datamodel module msticpy.datamodel.entities module msticpy.datamodel.entities.account module msticpy.datamodel.entities.alert module msticpy.datamodel.entities.azure_resource module msticpy.datamodel.entities.cloud_application module msticpy.datamodel.entities.cloud_logon_session module msticpy.datamodel.entities.dns module msticpy.datamodel.entities.entity module msticpy.datamodel.entities.entity_enums module msticpy.datamodel.entities.entity_graph module msticpy.datamodel.entities.file module msticpy.datamodel.entities.file_hash module msticpy.datamodel.entities.geo_location module msticpy.datamodel.entities.graph_property module msticpy.datamodel.entities.host module msticpy.datamodel.entities.host_logon_session module msticpy.datamodel.entities.iot_device module msticpy.datamodel.entities.ip_address module msticpy.datamodel.entities.mail_cluster module msticpy.datamodel.entities.mail_message module msticpy.datamodel.entities.mailbox module msticpy.datamodel.entities.mailbox_configuration module msticpy.datamodel.entities.malware module msticpy.datamodel.entities.network_connection module msticpy.datamodel.entities.oauth_application module msticpy.datamodel.entities.process module msticpy.datamodel.entities.registry_key module msticpy.datamodel.entities.registry_value module msticpy.datamodel.entities.security_group module msticpy.datamodel.entities.service_principal module msticpy.datamodel.entities.submission_mail module msticpy.datamodel.entities.threat_intelligence module msticpy.datamodel.entities.unknown_entity module msticpy.datamodel.entities.url module msticpy.datamodel.pivot module msticpy.datamodel.soc module msticpy.datamodel.soc.incident module msticpy.datamodel.soc.sentinel_alert module msticpy.init module msticpy.init.azure_ml_tools module msticpy.init.azure_synapse_tools module msticpy.init.logging module msticpy.init.mp_pandas_accessors module msticpy.init.mp_plugins module msticpy.init.nbinit module msticpy.init.nbmagics module msticpy.init.pivot module msticpy.init.pivot_core module msticpy.init.pivot_core.pivot_browser module msticpy.init.pivot_core.pivot_container module msticpy.init.pivot_core.pivot_magic_core module msticpy.init.pivot_core.pivot_pd_accessor module msticpy.init.pivot_core.pivot_pipeline module msticpy.init.pivot_core.pivot_register module msticpy.init.pivot_core.pivot_register_reader module msticpy.init.pivot_init module msticpy.init.pivot_init.pivot_data_queries module msticpy.init.pivot_init.pivot_ti_provider module msticpy.init.pivot_init.vt_pivot module msticpy.init.user_config module msticpy.lazy_importer module msticpy.nbtools module msticpy.nbtools.data_viewer module msticpy.nbtools.entityschema module msticpy.nbtools.foliummap module msticpy.nbtools.morph_charts module msticpy.nbtools.nbdisplay module msticpy.nbtools.nbwidgets module msticpy.nbtools.observationlist module msticpy.nbtools.process_tree module msticpy.nbtools.security_alert module msticpy.nbtools.security_alert_graph module msticpy.nbtools.security_base module msticpy.nbtools.security_event module msticpy.nbtools.ti_browser module msticpy.nbtools.timeline module msticpy.nbtools.timeline_duration module msticpy.nbtools.timeline_pd_accessor module msticpy.nbtools.timeseries module msticpy.nbtools.utility module msticpy.nbtools.wsconfig module msticpy.nbwidgets module msticpy.nbwidgets.core module msticpy.nbwidgets.get_environment_key module msticpy.nbwidgets.get_text module msticpy.nbwidgets.lookback module msticpy.nbwidgets.option_buttons module msticpy.nbwidgets.progress module msticpy.nbwidgets.query_time module msticpy.nbwidgets.select_alert module msticpy.nbwidgets.select_item module msticpy.nbwidgets.select_subset module msticpy.transform module msticpy.transform.auditdextract module msticpy.transform.base64unpack module msticpy.transform.cmd_line module msticpy.transform.iocextract module msticpy.transform.network module msticpy.transform.proc_tree_build_mde module msticpy.transform.proc_tree_build_winlx module msticpy.transform.proc_tree_builder module msticpy.transform.proc_tree_schema module msticpy.transform.process_tree_utils module msticpy.vis module msticpy.vis.code_view module msticpy.vis.data_viewer module msticpy.vis.data_viewer_panel module msticpy.vis.entity_graph_tools module msticpy.vis.figure_dimension module msticpy.vis.foliummap module msticpy.vis.matrix_plot module msticpy.vis.mordor_browser module msticpy.vis.morph_charts module msticpy.vis.mp_pandas_plot module msticpy.vis.nbdisplay module msticpy.vis.network_plot module msticpy.vis.process_tree module msticpy.vis.query_browser module msticpy.vis.ti_browser module msticpy.vis.timeline module msticpy.vis.timeline_common module msticpy.vis.timeline_duration module msticpy.vis.timeline_pd_accessor module msticpy.vis.timeline_values module msticpy.vis.timeseries module msticpy.vis.vtobject_browser module MsticpyAzureConfigError MsticpyAzureConnectionError MsticpyConfigError MsticpyConnectionError MsticpyCoreAccessor (class in msticpy.init.mp_pandas_accessors) MsticpyDataQueryError MsticpyException MsticpyImportExtraError MsticpyKeyVaultConfigError MsticpyKeyVaultMissingSecretError MsticpyKqlConnectionError MsticpyMissingDependencyError MsticpyNoDataSourceError MsticpyNotConnectedError MsticpyParameterError MsticpyPlotAccessor (class in msticpy.vis.mp_pandas_plot) MsticpyResourceError MsticpyTimeSeriesAccessor (class in msticpy.analysis.timeseries) MsticpyUserConfigError MsticpyUserError MsticpyVTGraphSaveGraphError MsticpyVTNoDataError MTR_TAC_URI (msticpy.data.drivers.mordor_driver.MitreAttack attribute) MTR_TECH_URI (msticpy.data.drivers.mordor_driver.MitreAttack attribute)

N

n_rows (msticpy.vis.process_tree.TreeResult attribute) name (msticpy.common.exceptions.MsticpyImportExtraError attribute) (msticpy.common.exceptions.MsticpyMissingDependencyError attribute) (msticpy.common.provider_settings.ProviderSettings attribute) (msticpy.context.contextproviders.context_provider_base.ContextProvider property) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider property) (msticpy.context.contextproviders.servicenow.ServiceNow property) (msticpy.context.http_provider.HttpProvider property) (msticpy.context.provider_base.Provider property) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB property) (msticpy.context.tiproviders.alienvault_otx.OTX property) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI property) (msticpy.context.tiproviders.binaryedge.BinaryEdge property) (msticpy.context.tiproviders.crowdsec.CrowdSec property) (msticpy.context.tiproviders.greynoise.GreyNoise property) (msticpy.context.tiproviders.ibm_xforce.XForce property) (msticpy.context.tiproviders.intsights.IntSights property) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore property) (msticpy.context.tiproviders.kql_base.KqlTIProvider property) (msticpy.context.tiproviders.open_page_rank.OPR property) (msticpy.context.tiproviders.pulsedive.Pulsedive property) (msticpy.context.tiproviders.riskiq.RiskIQ property) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider property) (msticpy.context.tiproviders.ti_provider_base.TIProvider property) (msticpy.context.tiproviders.tor_exit_nodes.Tor property) (msticpy.context.tiproviders.virustotal.VirusTotal property) (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) (msticpy.data.core.query_provider_utils_mixin.QueryParam attribute) (msticpy.data.core.query_source.QuerySource attribute) (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) Name (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.cloud_application.CloudApplication attribute) (msticpy.datamodel.entities.file.File attribute) (msticpy.datamodel.entities.malware.Malware attribute) (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) (msticpy.datamodel.entities.registry_value.RegistryValue attribute) name (msticpy.init.pivot_core.pivot_pipeline.PipelineStep attribute) (msticpy.nbwidgets.get_environment_key.GetEnvironmentKey property) name_property (msticpy.init.mp_plugins.PluginReg attribute) name_str (msticpy.datamodel.entities.account.Account property) (msticpy.datamodel.entities.alert.Alert property) (msticpy.datamodel.entities.azure_resource.AzureResource property) (msticpy.datamodel.entities.cloud_application.CloudApplication property) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession property) (msticpy.datamodel.entities.dns.Dns property) (msticpy.datamodel.entities.entity.Entity property) (msticpy.datamodel.entities.file.File property) (msticpy.datamodel.entities.file_hash.FileHash property) (msticpy.datamodel.entities.geo_location.GeoLocation property) (msticpy.datamodel.entities.host.Host property) (msticpy.datamodel.entities.host_logon_session.HostLogonSession property) (msticpy.datamodel.entities.iot_device.IoTDevice property) (msticpy.datamodel.entities.Ip property) (msticpy.datamodel.entities.ip_address.IpAddress property) (msticpy.datamodel.entities.Machine property) (msticpy.datamodel.entities.mail_cluster.MailCluster property) (msticpy.datamodel.entities.mail_message.MailMessage property) (msticpy.datamodel.entities.mailbox.Mailbox property) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration property) (msticpy.datamodel.entities.malware.Malware property) (msticpy.datamodel.entities.network_connection.NetworkConnection property) (msticpy.datamodel.entities.oauth_application.OAuthApplication property) (msticpy.datamodel.entities.process.Process property) (msticpy.datamodel.entities.registry_key.RegistryKey property) (msticpy.datamodel.entities.registry_value.RegistryValue property) (msticpy.datamodel.entities.security_group.SecurityGroup property) (msticpy.datamodel.entities.service_principal.ServicePrincipal property) (msticpy.datamodel.entities.submission_mail.SubmissionMail property) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence property) (msticpy.datamodel.entities.unknown_entity.UnknownEntity property) (msticpy.datamodel.entities.url.Url property) (msticpy.datamodel.entities.User property) (msticpy.datamodel.soc.incident.Incident property) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property)

NetBiosName (msticpy.datamodel.entities.host.Host attribute) network() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) NetworkConnection (class in msticpy.datamodel.entities.network_connection) NetworkMessageId (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) NetworkMessageIds (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) new (msticpy.config.query_editor.CustomChange attribute) new_dynamic_summary() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary class method) new_process_lc (msticpy.transform.proc_tree_schema.ColNames attribute) new_process_lc_par (msticpy.transform.proc_tree_schema.ColNames attribute) no_border_layout() (msticpy.config.comp_edit.CEItemsBase static method) (msticpy.config.comp_edit.CompEditDisplayMixin static method) (msticpy.config.comp_edit.CompEditFrame static method) (msticpy.config.comp_edit.CompEditItems static method) (msticpy.config.comp_edit.CompEditSimple static method) (msticpy.config.file_browser.FileBrowser static method) (msticpy.config.mp_config_file.MpConfigFile static method) NO_DATA (msticpy.context.lookup_result.LookupStatus attribute) no_display_exceptions() (msticpy.common.exceptions.MsticpyAzureConfigError class method) (msticpy.common.exceptions.MsticpyAzureConnectionError class method) (msticpy.common.exceptions.MsticpyConnectionError class method) (msticpy.common.exceptions.MsticpyDataQueryError class method) (msticpy.common.exceptions.MsticpyImportExtraError class method) (msticpy.common.exceptions.MsticpyKeyVaultConfigError class method) (msticpy.common.exceptions.MsticpyKeyVaultMissingSecretError class method) (msticpy.common.exceptions.MsticpyKqlConnectionError class method) (msticpy.common.exceptions.MsticpyMissingDependencyError class method) (msticpy.common.exceptions.MsticpyNoDataSourceError class method) (msticpy.common.exceptions.MsticpyNotConnectedError class method) (msticpy.common.exceptions.MsticpyParameterError class method) (msticpy.common.exceptions.MsticpyUserConfigError class method) (msticpy.common.exceptions.MsticpyUserError class method) (msticpy.context.tiproviders.riskiq.RiskIQAPIUserError class method) (msticpy.context.tiproviders.riskiq.RiskIQUserError class method) (msticpy.transform.proc_tree_schema.ProcessTreeSchemaException class method) Node (class in msticpy.datamodel.entities.entity_graph) node_properties (msticpy.datamodel.entities.account.Account property) (msticpy.datamodel.entities.alert.Alert property) (msticpy.datamodel.entities.azure_resource.AzureResource property) (msticpy.datamodel.entities.cloud_application.CloudApplication property) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession property) (msticpy.datamodel.entities.dns.Dns property) (msticpy.datamodel.entities.entity.Entity property) (msticpy.datamodel.entities.file.File property) (msticpy.datamodel.entities.file_hash.FileHash property) (msticpy.datamodel.entities.geo_location.GeoLocation property) (msticpy.datamodel.entities.host.Host property) (msticpy.datamodel.entities.host_logon_session.HostLogonSession property) (msticpy.datamodel.entities.iot_device.IoTDevice property) (msticpy.datamodel.entities.Ip property) (msticpy.datamodel.entities.ip_address.IpAddress property) (msticpy.datamodel.entities.Machine property) (msticpy.datamodel.entities.mail_cluster.MailCluster property) (msticpy.datamodel.entities.mail_message.MailMessage property) (msticpy.datamodel.entities.mailbox.Mailbox property) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration property) (msticpy.datamodel.entities.malware.Malware property) (msticpy.datamodel.entities.network_connection.NetworkConnection property) (msticpy.datamodel.entities.oauth_application.OAuthApplication property) (msticpy.datamodel.entities.process.Process property) (msticpy.datamodel.entities.registry_key.RegistryKey property) (msticpy.datamodel.entities.registry_value.RegistryValue property) (msticpy.datamodel.entities.security_group.SecurityGroup property) (msticpy.datamodel.entities.service_principal.ServicePrincipal property) (msticpy.datamodel.entities.submission_mail.SubmissionMail property) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence property) (msticpy.datamodel.entities.unknown_entity.UnknownEntity property) (msticpy.datamodel.entities.url.Url property) (msticpy.datamodel.entities.User property) (msticpy.datamodel.soc.incident.Incident property) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) NOT_SUPPORTED (msticpy.context.lookup_result.LookupStatus attribute) notebooks (msticpy.data.drivers.mordor_driver.MordorEntry attribute) NTDomain (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.host.Host attribute) numerator (msticpy.nbwidgets.core.TimeUnit attribute)

O

oauth_url (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver attribute) OAuthAppId (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) OAuthApplication (class in msticpy.datamodel.entities.oauth_application) OAuthObjectId (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) obfuscate_df() (in module msticpy.data.data_obfus) ObfuscationAccessor (class in msticpy.data.data_obfus) ObjectContainer (class in msticpy.common.data_types) ObjectGuid (msticpy.datamodel.entities.account.Account attribute) (msticpy.datamodel.entities.security_group.SecurityGroup attribute) observable (msticpy.context.lookup_result.SanitizedObservable attribute) observable_type (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) observable_value (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) Observation (class in msticpy.analysis.observationlist) Observations (class in msticpy.analysis.observationlist) observations (msticpy.analysis.observationlist.Observations property) OData (class in msticpy.data.drivers.odata_driver) OK (msticpy.context.lookup_result.LookupStatus attribute) OMSAgentID (msticpy.datamodel.entities.host.Host attribute) only_interactive_cred() (in module msticpy.auth.azure_auth_core) OperatingSystem (msticpy.datamodel.entities.iot_device.IoTDevice attribute)

operator (msticpy.vis.data_viewer.FilterExpr attribute) OPR (class in msticpy.context.tiproviders.open_page_rank) OptionButtons (class in msticpy.nbwidgets.option_buttons) origin_time (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) original_string (msticpy.transform.base64unpack.BinaryRecord attribute) OS_QUERY_DATEIME_COLS (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver attribute) OSFamily (class in msticpy.datamodel.entities.entity_enums) (msticpy.datamodel.entities.host.Host attribute) OSQuery (msticpy.data.core.query_defns.DataEnvironment attribute) OSQueryLogDriver (class in msticpy.data.drivers.local_osquery_driver) OSQueryLogs (msticpy.data.core.query_defns.DataEnvironment attribute) OSVersion (msticpy.datamodel.entities.host.Host attribute) OTHER (msticpy.context.lookup_result.LookupStatus attribute) OTRF (msticpy.data.core.query_defns.DataEnvironment attribute) OTX (class in msticpy.context.tiproviders.alienvault_otx) overlay_color (msticpy.vis.timeline.PlotParams attribute) overlay_columns (msticpy.vis.timeline.PlotParams attribute) overlay_data (msticpy.vis.timeline.PlotParams attribute)

P

P1Sender (msticpy.datamodel.entities.mail_message.MailMessage attribute) P1SenderDisplayName (msticpy.datamodel.entities.mail_message.MailMessage attribute) P1SenderDomain (msticpy.datamodel.entities.mail_message.MailMessage attribute) P2Sender (msticpy.datamodel.entities.mail_message.MailMessage attribute) P2SenderDisplayName (msticpy.datamodel.entities.mail_message.MailMessage attribute) P2SenderDomain (msticpy.datamodel.entities.mail_message.MailMessage attribute) PACKAGE (msticpy.context.contextlookup.ContextLookup attribute) (msticpy.context.lookup.Lookup attribute) (msticpy.context.tilookup.TILookup attribute) packed_content (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) param_attrs (msticpy.init.pivot_init.pivot_data_queries.QueryParams attribute) param_container (msticpy.config.query_editor.QueryParameterEditWidget attribute) PARAM_HANDLER (msticpy.data.core.query_defns.Formatters attribute) ParamAttrs (class in msticpy.init.pivot_init.pivot_data_queries) parameter_dropdown (msticpy.config.query_editor.QueryParameterEditWidget attribute) parameter_name_widget (msticpy.config.query_editor.QueryParameterEditWidget attribute) parameters (msticpy.data.core.query_template.Query attribute) (msticpy.data.core.query_template.QueryDefaults attribute) params (msticpy.context.http_provider.APILookupParams attribute) (msticpy.data.core.query_source.QuerySource attribute) (msticpy.data.drivers.azure_kusto_driver.AuthParams attribute) (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep attribute) (msticpy.init.pivot_core.pivot_pipeline.PipelineStep attribute) PARENT (msticpy.config.file_browser.FileBrowser attribute) parent_id (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) (msticpy.transform.proc_tree_schema.ProcSchema attribute) parent_key (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) (msticpy.transform.proc_tree_schema.ColNames attribute) parent_name (msticpy.transform.proc_tree_schema.ProcSchema attribute) parent_proc_lc (msticpy.transform.proc_tree_schema.ColNames attribute) ParentProcess (msticpy.datamodel.entities.process.Process attribute) parse() (msticpy.common.utility.types.ParseableEnum method) (msticpy.context.tiproviders.result_severity.ResultSeverity class method) (msticpy.data.core.query_defns.DataEnvironment class method) (msticpy.data.core.query_defns.DataFamily class method) (msticpy.transform.iocextract.IoCType class method) parse_json() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) parse_pipeline() (msticpy.init.pivot_core.pivot_pipeline.Pipeline class method) parse_pipelines() (msticpy.init.pivot_core.pivot_pipeline.Pipeline static method) parse_results() (msticpy.context.contextproviders.context_provider_base.ContextProvider method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider method) (msticpy.context.contextproviders.servicenow.ServiceNow method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB method) (msticpy.context.tiproviders.alienvault_otx.OTX method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI method) (msticpy.context.tiproviders.binaryedge.BinaryEdge method) (msticpy.context.tiproviders.crowdsec.CrowdSec method) (msticpy.context.tiproviders.greynoise.GreyNoise method) (msticpy.context.tiproviders.ibm_xforce.XForce method) (msticpy.context.tiproviders.intsights.IntSights method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore method) (msticpy.context.tiproviders.kql_base.KqlTIProvider method) (msticpy.context.tiproviders.open_page_rank.OPR method) (msticpy.context.tiproviders.pulsedive.Pulsedive method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider method) (msticpy.context.tiproviders.ti_provider_base.TIProvider method) (msticpy.context.tiproviders.tor_exit_nodes.Tor method) (msticpy.context.tiproviders.virustotal.VirusTotal method) parse_time_unit() (in module msticpy.nbwidgets.core) ParseableEnum (class in msticpy.common.utility.types) path (msticpy.common.exceptions.MsticpyImportExtraError attribute) (msticpy.common.exceptions.MsticpyMissingDependencyError attribute) (msticpy.context.http_provider.APILookupParams attribute) (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) path_separator (msticpy.datamodel.entities.file.File property) (msticpy.transform.proc_tree_schema.ProcSchema attribute) PDEntityType (class in msticpy.context.tiproviders.pulsedive) PDlookup (class in msticpy.context.tiproviders.pulsedive) PDQuery (class in msticpy.context.tiproviders.pulsedive) period (msticpy.common.timespan.TimeSpan property) PeriodogramPollingDetector (class in msticpy.analysis.polling_detection) Permissions (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) Pipeline (class in msticpy.init.pivot_core.pivot_pipeline) PipelineExecStep (class in msticpy.init.pivot_core.pivot_pipeline) PipelineStep (class in msticpy.init.pivot_core.pivot_pipeline) pivot_value() (msticpy.context.tiproviders.riskiq.RiskIQ method) PivotAccessor (class in msticpy.init.pivot_core.pivot_pd_accessor) PivotBrowser (class in msticpy.init.pivot_core.pivot_browser) PivotContainer (class in msticpy.init.pivot_core.pivot_container) PivotProvider (class in msticpy.context.provider_base) PivotQueryFunctions (class in msticpy.init.pivot_init.pivot_data_queries) PivotRegistration (class in msticpy.init.pivot_core.pivot_register) pivots() (msticpy.datamodel.entities.account.Account class method) (msticpy.datamodel.entities.alert.Alert class method) (msticpy.datamodel.entities.azure_resource.AzureResource class method) (msticpy.datamodel.entities.cloud_application.CloudApplication class method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession class method) (msticpy.datamodel.entities.dns.Dns class method) (msticpy.datamodel.entities.entity.Entity class method) (msticpy.datamodel.entities.file.File class method) (msticpy.datamodel.entities.file_hash.FileHash class method) (msticpy.datamodel.entities.geo_location.GeoLocation class method) (msticpy.datamodel.entities.host.Host class method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession class method) (msticpy.datamodel.entities.iot_device.IoTDevice class method) (msticpy.datamodel.entities.Ip class method) (msticpy.datamodel.entities.ip_address.IpAddress class method) (msticpy.datamodel.entities.Machine class method) (msticpy.datamodel.entities.mail_cluster.MailCluster class method) (msticpy.datamodel.entities.mail_message.MailMessage class method) (msticpy.datamodel.entities.mailbox.Mailbox class method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration class method) (msticpy.datamodel.entities.malware.Malware class method) (msticpy.datamodel.entities.network_connection.NetworkConnection class method) (msticpy.datamodel.entities.oauth_application.OAuthApplication class method) (msticpy.datamodel.entities.process.Process class method) (msticpy.datamodel.entities.registry_key.RegistryKey class method) (msticpy.datamodel.entities.registry_value.RegistryValue class method) (msticpy.datamodel.entities.security_group.SecurityGroup class method) (msticpy.datamodel.entities.service_principal.ServicePrincipal class method) (msticpy.datamodel.entities.submission_mail.SubmissionMail class method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence class method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity class method) (msticpy.datamodel.entities.url.Url class method) (msticpy.datamodel.entities.User class method) (msticpy.datamodel.soc.incident.Incident class method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert class method) PivQuerySettings (class in msticpy.init.pivot_init.pivot_data_queries) PKG_CONF_ARGS_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) PKG_CONF_NAME_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) PKG_CONF_RES_GROUP_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) PKG_CONF_SUB_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) PKG_CONF_TENANT_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) PKG_CONF_WS_KEY (msticpy.common.wsconfig.WorkspaceConfig attribute) platform (msticpy.data.drivers.mordor_driver.MordorEntry attribute) plot() (msticpy.analysis.timeseries.MsticpyTimeSeriesAccessor method) (msticpy.vis.entity_graph_tools.EntityGraph method) (msticpy.vis.process_tree.ProcessTreeAccessor method) (msticpy.vis.timeline_pd_accessor.TimeLineAccessor method) plot_cluster() (in module msticpy.analysis.eventcluster)

plot_duration() (msticpy.vis.timeline_pd_accessor.TimeLineAccessor method) plot_entity_graph() (in module msticpy.vis.network_plot) plot_entitygraph() (in module msticpy.vis.entity_graph_tools) plot_map() (in module msticpy.vis.foliummap) plot_matrix() (in module msticpy.vis.matrix_plot) plot_nx_graph() (in module msticpy.vis.network_plot) plot_outlier_results() (in module msticpy.analysis.outliers) plot_process_tree() (in module msticpy.vis.process_tree) plot_ref_events() (in module msticpy.vis.timeline_common) plot_ref_line() (in module msticpy.vis.timeline_common) plot_values() (msticpy.vis.timeline_pd_accessor.TimeLineAccessor method) PlotParams (class in msticpy.vis.matrix_plot) (class in msticpy.vis.timeline) (class in msticpy.vis.timeline_duration) (class in msticpy.vis.timeline_values) PluginReg (class in msticpy.init.mp_plugins) pop() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) popitem() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) populate_config_to_mp_config() (in module msticpy.init.azure_ml_tools) populate_query_dropdown() (msticpy.config.query_editor.QueryEditWidget method) populate_widgets() (msticpy.config.query_editor.MetadataEditWidget method) (msticpy.config.query_editor.QueryEditWidget method) (msticpy.config.query_editor.QueryParameterEditWidget method) pos_params (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep attribute) (msticpy.init.pivot_core.pivot_pipeline.PipelineStep attribute) preprocess_observable() (in module msticpy.context.preprocess_observable) PreProcessor (class in msticpy.context.preprocess_observable) primary (msticpy.common.provider_settings.ProviderSettings attribute) primary_account (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) primary_host (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) primary_process (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) print_license() (msticpy.context.geoip.GeoIpLookup method) (msticpy.context.geoip.IPStackLookup method) print_pipeline() (msticpy.init.pivot_core.pivot_pipeline.Pipeline method) printable_bytes (msticpy.transform.base64unpack.BinaryRecord attribute) priority (msticpy.transform.iocextract.IoCPattern attribute) PRIVATE (msticpy.init.pivot_init.vt_pivot.VTAPIScope attribute) proc_key (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) (msticpy.transform.proc_tree_schema.ColNames attribute) proc_tree (msticpy.vis.process_tree.TreeResult attribute) Process (class in msticpy.datamodel.entities.process) process_id (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) (msticpy.transform.proc_tree_schema.ProcSchema attribute) process_name (msticpy.transform.proc_tree_schema.ProcSchema attribute) process_tree (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior property) process_tree() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) Processes (msticpy.datamodel.entities.malware.Malware attribute) ProcessFilePath (msticpy.datamodel.entities.process.Process property) ProcessId (msticpy.datamodel.entities.process.Process attribute) ProcessName (msticpy.datamodel.entities.process.Process property) processors (msticpy.context.preprocess_observable.PreProcessor property) ProcessTreeAccessor (class in msticpy.vis.process_tree) ProcessTreeSchemaException ProcSchema (class in msticpy.transform.proc_tree_schema) Progress (class in msticpy.nbwidgets.progress) ProgressCounter (class in msticpy.context.lookup) prompt_for_ws() (msticpy.common.wsconfig.WorkspaceConfig method) properties (msticpy.datamodel.entities.account.Account property) (msticpy.datamodel.entities.alert.Alert property) (msticpy.datamodel.entities.azure_resource.AzureResource property) (msticpy.datamodel.entities.cloud_application.CloudApplication property) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession property) (msticpy.datamodel.entities.dns.Dns property) (msticpy.datamodel.entities.entity.Entity property) (msticpy.datamodel.entities.file.File property) (msticpy.datamodel.entities.file_hash.FileHash property) (msticpy.datamodel.entities.geo_location.GeoLocation property) (msticpy.datamodel.entities.host.Host property) (msticpy.datamodel.entities.host_logon_session.HostLogonSession property) (msticpy.datamodel.entities.iot_device.IoTDevice property) (msticpy.datamodel.entities.Ip property) (msticpy.datamodel.entities.ip_address.IpAddress property) (msticpy.datamodel.entities.Machine property) (msticpy.datamodel.entities.mail_cluster.MailCluster property) (msticpy.datamodel.entities.mail_message.MailMessage property) (msticpy.datamodel.entities.mailbox.Mailbox property) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration property) (msticpy.datamodel.entities.malware.Malware property) (msticpy.datamodel.entities.network_connection.NetworkConnection property) (msticpy.datamodel.entities.oauth_application.OAuthApplication property) (msticpy.datamodel.entities.process.Process property) (msticpy.datamodel.entities.registry_key.RegistryKey property) (msticpy.datamodel.entities.registry_value.RegistryValue property) (msticpy.datamodel.entities.security_group.SecurityGroup property) (msticpy.datamodel.entities.service_principal.ServicePrincipal property) (msticpy.datamodel.entities.submission_mail.SubmissionMail property) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence property) (msticpy.datamodel.entities.unknown_entity.UnknownEntity property) (msticpy.datamodel.entities.url.Url property) (msticpy.datamodel.entities.User property) (msticpy.datamodel.soc.incident.Incident property) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert property) (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) PROPERTY_TYPES (msticpy.data.drivers.driver_base.DriverProps attribute) Protocol (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) Protocols (msticpy.datamodel.entities.iot_device.IoTDevice attribute) Provider (class in msticpy.context.provider_base) provider (msticpy.common.provider_settings.ProviderSettings attribute) Provider (msticpy.datamodel.entities.azure_resource.AzureResource property) PROVIDER_NAME (msticpy.context.tiproviders.abuseipdb.AbuseIPDB attribute) (msticpy.context.tiproviders.binaryedge.BinaryEdge attribute) provider_status (msticpy.context.contextlookup.ContextLookup property) (msticpy.context.lookup.Lookup property) (msticpy.context.tilookup.TILookup property) provider_usage() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.lookup.Lookup method) (msticpy.context.tilookup.TILookup method) ProviderArgs (class in msticpy.common.provider_settings) ProviderName (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) PROVIDERS (msticpy.context.contextlookup.ContextLookup attribute) (msticpy.context.lookup.Lookup attribute) (msticpy.context.tilookup.TILookup attribute) ProviderSettings (class in msticpy.common.provider_settings) PUBLIC (msticpy.init.pivot_init.vt_pivot.VTAPIScope attribute) PUBLIC_ATTRS (msticpy.data.drivers.driver_base.DriverProps attribute) PublisherName (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) PUID (msticpy.datamodel.entities.account.Account attribute) Pulsedive (class in msticpy.context.tiproviders.pulsedive)

Q

qualified_name (msticpy.datamodel.entities.account.Account property) (msticpy.datamodel.entities.User property) Query (class in msticpy.data.core.query_template) query (msticpy.data.core.query_source.QuerySource property) (msticpy.data.core.query_template.QueryArgs attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) Query (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) query (msticpy.init.pivot_init.pivot_data_queries.ParamAttrs attribute) query() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver method) (msticpy.data.drivers.driver_base.DriverBase method) (msticpy.data.drivers.elastic_driver.ElasticDriver method) (msticpy.data.drivers.kql_driver.KqlDriver method) (msticpy.data.drivers.kusto_driver.KustoDriver method) (msticpy.data.drivers.local_data_driver.LocalDataDriver method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver method) (msticpy.data.drivers.mdatp_driver.MDATPDriver method) (msticpy.data.drivers.mordor_driver.MordorDriver method) (msticpy.data.drivers.odata_driver.OData method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver method) (msticpy.data.drivers.splunk_driver.SplunkDriver method) (msticpy.data.drivers.sumologic_driver.SumologicDriver method) query_attach_spec (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) (msticpy.data.drivers.cybereason_driver.CybereasonDriver property) (msticpy.data.drivers.driver_base.DriverBase property) (msticpy.data.drivers.elastic_driver.ElasticDriver property) (msticpy.data.drivers.kql_driver.KqlDriver property) (msticpy.data.drivers.kusto_driver.KustoDriver property) (msticpy.data.drivers.local_data_driver.LocalDataDriver property) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver property) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver property) (msticpy.data.drivers.mdatp_driver.MDATPDriver property) (msticpy.data.drivers.mordor_driver.MordorDriver property) (msticpy.data.drivers.odata_driver.OData property) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver property) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver property) (msticpy.data.drivers.splunk_driver.SplunkDriver property) (msticpy.data.drivers.sumologic_driver.SumologicDriver property) QUERY_FAILED (msticpy.context.lookup_result.LookupStatus attribute) query_frequency (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) query_help() (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) query_id (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) query_macros (msticpy.data.core.query_template.QueryMetadata attribute) query_names (msticpy.data.core.query_store.QueryStore property) query_params (msticpy.data.core.query_defns.QueryParamProvider property) (msticpy.nbtools.security_alert.SecurityAlert property) (msticpy.nbtools.security_base.SecurityBase property) (msticpy.nbtools.security_event.SecurityEvent property) (msticpy.nbwidgets.select_alert.AlertSelector property) query_period (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) query_store (msticpy.data.core.data_providers.QueryProvider attribute) (msticpy.data.core.query_provider_utils_mixin.QueryProviderProtocol attribute) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin attribute) (msticpy.data.core.query_source.QuerySource attribute)

query_time (msticpy.data.core.data_providers.QueryProvider property) query_type (msticpy.context.tiproviders.pulsedive.PDQuery attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) query_usable() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver method) (msticpy.data.drivers.driver_base.DriverBase method) (msticpy.data.drivers.elastic_driver.ElasticDriver method) (msticpy.data.drivers.kql_driver.KqlDriver method) (msticpy.data.drivers.kusto_driver.KustoDriver method) (msticpy.data.drivers.local_data_driver.LocalDataDriver method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver method) (msticpy.data.drivers.mdatp_driver.MDATPDriver method) (msticpy.data.drivers.mordor_driver.MordorDriver method) (msticpy.data.drivers.odata_driver.OData method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver method) (msticpy.data.drivers.splunk_driver.SplunkDriver method) (msticpy.data.drivers.sumologic_driver.SumologicDriver method) query_with_results() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver method) (msticpy.data.drivers.driver_base.DriverBase method) (msticpy.data.drivers.elastic_driver.ElasticDriver method) (msticpy.data.drivers.kql_driver.KqlDriver method) (msticpy.data.drivers.kusto_driver.KustoDriver method) (msticpy.data.drivers.local_data_driver.LocalDataDriver method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver method) (msticpy.data.drivers.mdatp_driver.MDATPDriver method) (msticpy.data.drivers.mordor_driver.MordorDriver method) (msticpy.data.drivers.odata_driver.OData method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver method) (msticpy.data.drivers.splunk_driver.SplunkDriver method) (msticpy.data.drivers.sumologic_driver.SumologicDriver method) QueryArgs (class in msticpy.data.core.query_template) QueryCollection (class in msticpy.data.core.query_template) QueryContainer (class in msticpy.data.core.query_container) QueryDefaults (class in msticpy.data.core.query_template) QueryEditor (class in msticpy.config.query_editor) QueryEditWidget (class in msticpy.config.query_editor) QueryMetadata (class in msticpy.data.core.query_template) QueryParam (class in msticpy.data.core.query_provider_utils_mixin) QueryParameter (class in msticpy.data.core.query_template) QueryParameterEditWidget (class in msticpy.config.query_editor) QueryParamProvider (class in msticpy.data.core.query_defns) QueryParams (class in msticpy.init.pivot_init.pivot_data_queries) QueryProvider (class in msticpy.data.core.data_providers) QueryProviderConnectionsMixin (class in msticpy.data.core.query_provider_connections_mixin) QueryProviderProtocol (class in msticpy.data.core.query_provider_connections_mixin) (class in msticpy.data.core.query_provider_utils_mixin) QueryProviderUtilsMixin (class in msticpy.data.core.query_provider_utils_mixin) QuerySource (class in msticpy.data.core.query_source) QuerySourceFields (class in msticpy.data.drivers.azure_kusto_driver) QueryStore (class in msticpy.data.core.query_store) QueryTime (class in msticpy.nbwidgets.query_time) (msticpy.datamodel.entities.mail_cluster.MailCluster attribute)

R

range_tool (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) rarest_window_session() (in module msticpy.analysis.anomalous_sequence.utils.cmds_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_only) (in module msticpy.analysis.anomalous_sequence.utils.cmds_params_values) raw_results() (in module msticpy.vis.ti_browser) read_folder() (msticpy.config.file_browser.FileBrowser static method) read_from_file() (in module msticpy.transform.auditdextract) read_plugins() (in module msticpy.init.mp_plugins) read_query_def_file() (in module msticpy.data.core.data_query_reader) read_secret() (msticpy.auth.secret_settings.SecretsClient static method) read_yaml_files() (in module msticpy.data.drivers.sentinel_query_reader) real (msticpy.nbwidgets.core.TimeUnit attribute) ReceivedDate (msticpy.datamodel.entities.mail_message.MailMessage attribute) Recipient (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) RedirectURLs (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) ref_col (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) ref_event (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) ref_events (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) ref_label (msticpy.vis.timeline.PlotParams attribute) ref_time (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) ref_time_col (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) ref_times (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) refang_ioc() (in module msticpy.common.utility.format) reference (msticpy.transform.base64unpack.BinaryRecord attribute) references (msticpy.data.drivers.mordor_driver.MordorEntry attribute) refresh_config() (in module msticpy.common.pkg_config) refresh_keyring() (in module msticpy.common.provider_settings) (msticpy.auth.secret_settings.SecretsClient method) refresh_mp_config() (msticpy.config.mp_config_file.MpConfigFile static method) refresh_token() (msticpy.auth.msal_auth.MSALDelegatedAuth method) reg_dest (msticpy.init.mp_plugins.PluginReg attribute) register_pivots() (in module msticpy.init.pivot_core.pivot_register_reader) (msticpy.context.provider_base.PivotProvider method) (msticpy.context.tiproviders.riskiq.RiskIQ method) (msticpy.context.tiproviders.ti_provider_base.TIPivotProvider method) register_ti_pivot_providers() (in module msticpy.init.pivot_init.pivot_ti_provider) RegisteredWidget (class in msticpy.nbwidgets.core) RegistryHive (class in msticpy.datamodel.entities.entity_enums) RegistryKey (class in msticpy.datamodel.entities.registry_key) RegistryValue (class in msticpy.datamodel.entities.registry_value) relation_id (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) relation_name (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) RELATIONSHIP_TYPE (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) RELATIONSHIPS (msticpy.context.vtlookupv3.vtlookupv3.VTObjectProperties attribute) relationships_to_graph() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 static method) relevant_techniques (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) reload_provider_settings() (msticpy.context.contextlookup.ContextLookup class method) (msticpy.context.lookup.Lookup class method) (msticpy.context.tilookup.TILookup class method) reload_providers() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.lookup.Lookup method) (msticpy.context.tilookup.TILookup method) reload_settings() (in module msticpy.common.provider_settings) remove_common_items() (in module msticpy.analysis.outliers) remove_link() (msticpy.vis.entity_graph_tools.EntityGraph method) remove_node() (msticpy.vis.entity_graph_tools.EntityGraph method) render_vt_graph() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 static method) replace_guid() (in module msticpy.data.data_obfus) replace_in_query() (in module msticpy.config.query_editor) ReportLink (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) ReportType (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) req_body (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver attribute) request_uri (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver attribute)

required (msticpy.init.pivot_init.pivot_data_queries.ParamAttrs attribute) (msticpy.init.pivot_init.pivot_data_queries.QueryParams attribute) required_columns (msticpy.transform.proc_tree_schema.ProcSchema property) required_data_connectors (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) required_fields() (msticpy.analysis.observationlist.Observation class method) required_params (msticpy.data.core.query_source.QuerySource property) reset_changed_data() (msticpy.config.query_editor.MetadataEditWidget method) (msticpy.config.query_editor.QueryEditWidget method) (msticpy.config.query_editor.QueryParameterEditWidget method) reset_ipython_exception_handler() (in module msticpy.init.nbinit) resolve_cloud_alias() (msticpy.auth.cloud_mappings.AzureCloudConfig static method) resolve_ioc_type() (msticpy.context.tiproviders.abuseipdb.AbuseIPDB static method) (msticpy.context.tiproviders.alienvault_otx.OTX static method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI static method) (msticpy.context.tiproviders.binaryedge.BinaryEdge static method) (msticpy.context.tiproviders.crowdsec.CrowdSec static method) (msticpy.context.tiproviders.greynoise.GreyNoise static method) (msticpy.context.tiproviders.ibm_xforce.XForce static method) (msticpy.context.tiproviders.intsights.IntSights static method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore static method) (msticpy.context.tiproviders.kql_base.KqlTIProvider static method) (msticpy.context.tiproviders.open_page_rank.OPR static method) (msticpy.context.tiproviders.pulsedive.Pulsedive static method) (msticpy.context.tiproviders.riskiq.RiskIQ static method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider static method) (msticpy.context.tiproviders.ti_provider_base.TIProvider static method) (msticpy.context.tiproviders.tor_exit_nodes.Tor static method) (msticpy.context.tiproviders.virustotal.VirusTotal static method) resolve_item_type() (msticpy.context.contextproviders.context_provider_base.ContextProvider static method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider static method) (msticpy.context.contextproviders.servicenow.ServiceNow static method) (msticpy.context.http_provider.HttpProvider static method) (msticpy.context.provider_base.Provider static method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB static method) (msticpy.context.tiproviders.alienvault_otx.OTX static method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI static method) (msticpy.context.tiproviders.binaryedge.BinaryEdge static method) (msticpy.context.tiproviders.crowdsec.CrowdSec static method) (msticpy.context.tiproviders.greynoise.GreyNoise static method) (msticpy.context.tiproviders.ibm_xforce.XForce static method) (msticpy.context.tiproviders.intsights.IntSights static method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore static method) (msticpy.context.tiproviders.kql_base.KqlTIProvider static method) (msticpy.context.tiproviders.open_page_rank.OPR static method) (msticpy.context.tiproviders.pulsedive.Pulsedive static method) (msticpy.context.tiproviders.riskiq.RiskIQ static method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider static method) (msticpy.context.tiproviders.ti_provider_base.TIProvider static method) (msticpy.context.tiproviders.tor_exit_nodes.Tor static method) (msticpy.context.tiproviders.virustotal.VirusTotal static method) resolve_param_aliases() (msticpy.data.core.query_source.QuerySource method) resolve_pkg_path() (in module msticpy.common.utility.package) RESOURCE_GROUP (msticpy.common.wsconfig.WorkspaceConfig attribute) resource_manager (msticpy.auth.cloud_mappings.AzureCloudConfig property) ResourceGraph (msticpy.data.core.query_defns.DataEnvironment attribute) (msticpy.data.core.query_defns.DataFamily attribute) ResourceGraphDriver (class in msticpy.data.drivers.resource_graph_driver) ResourceGroup (msticpy.datamodel.entities.azure_resource.AzureResource property) ResourceId (msticpy.datamodel.entities.azure_resource.AzureResource attribute) ResourceIdParts (msticpy.datamodel.entities.azure_resource.AzureResource attribute) result_to_df() (msticpy.context.contextlookup.ContextLookup static method) (msticpy.context.lookup.Lookup static method) (msticpy.context.tilookup.TILookup static method) ResultSeverity (class in msticpy.context.tiproviders.result_severity) return_raw_output (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) Risk (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) RiskIQ (class in msticpy.context.tiproviders.riskiq) RiskIQAPIUserError RiskIQUserError RiskLevel (msticpy.datamodel.entities.mailbox.Mailbox attribute) risky_cmd_line() (in module msticpy.transform.cmd_line) risky_sudo_sessions() (in module msticpy.analysis.syslog_utils) run() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) (msticpy.init.pivot_core.pivot_pipeline.Pipeline method) run_txt2df() (in module msticpy.init.pivot_core.pivot_magic_core)

S

sandbox_id (msticpy.context.vtlookupv3.vtfile_behavior.VTFileBehavior property) SanitizedObservable (class in msticpy.context.lookup_result) save_map() (msticpy.vis.foliummap.FoliumMap method) save_metadata() (msticpy.config.query_editor.MetadataEditWidget method) save_obj_to_cell() (in module msticpy.common.utility.ipython) save_parameter() (msticpy.config.query_editor.QueryParameterEditWidget method) save_queries_to_yaml() (in module msticpy.config.query_editor) save_query() (msticpy.config.query_editor.QueryEditWidget method) save_to_file() (msticpy.config.mp_config_file.MpConfigFile method) SCAN (msticpy.context.tiproviders.pulsedive.PDEntityType attribute) scan() (msticpy.context.tiproviders.pulsedive.PDlookup method) SCANS (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) schema (msticpy.analysis.observationlist.Observation attribute) (msticpy.data.core.data_providers.QueryProvider property) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin property) (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) (msticpy.data.drivers.cybereason_driver.CybereasonDriver property) (msticpy.data.drivers.driver_base.DriverBase property) (msticpy.data.drivers.elastic_driver.ElasticDriver property) (msticpy.data.drivers.kql_driver.KqlDriver property) (msticpy.data.drivers.kusto_driver.KustoDriver property) (msticpy.data.drivers.local_data_driver.LocalDataDriver property) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver property) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver property) (msticpy.data.drivers.mdatp_driver.MDATPDriver property) (msticpy.data.drivers.mordor_driver.MordorDriver property) (msticpy.data.drivers.odata_driver.OData property) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver property) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver property) (msticpy.data.drivers.splunk_driver.SplunkDriver property) (msticpy.data.drivers.sumologic_driver.SumologicDriver property) (msticpy.vis.process_tree.TreeResult attribute) schema_tables (msticpy.data.core.data_providers.QueryProvider property) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin property) score (msticpy.analysis.observationlist.Observation attribute) score_and_visualise_sessions() (in module msticpy.analysis.anomalous_sequence.anomalous) score_sessions() (in module msticpy.analysis.anomalous_sequence.anomalous) screenshot() (in module msticpy.context.domain_utils) search() (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 method) (msticpy.data.core.data_providers.QueryProvider method) (msticpy.data.core.query_provider_utils_mixin.QueryProviderUtilsMixin method) search_charts() (msticpy.vis.morph_charts.MorphCharts method) search_for_file() (in module msticpy.common.utility.package) search_items (msticpy.data.core.query_store.QueryStore property) search_key (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) search_mdr_data() (in module msticpy.data.drivers.mordor_driver) search_module() (in module msticpy.common.utility.package) search_name() (in module msticpy.common.utility.package) search_queries() (msticpy.data.drivers.mordor_driver.MordorDriver method) SECOND (msticpy.nbwidgets.core.TimeUnit attribute) secrets (msticpy.auth.keyvault_client.BHKeyVaultClient property) SecretsClient (class in msticpy.auth.secret_settings) SecurityAlert (class in msticpy.nbtools.security_alert) (msticpy.data.core.query_defns.DataFamily attribute) SecurityBase (class in msticpy.nbtools.security_base) SecurityEvent (class in msticpy.nbtools.security_event) SecurityGraph (msticpy.data.core.query_defns.DataEnvironment attribute) SecurityGraphAlert (msticpy.data.core.query_defns.DataFamily attribute) SecurityGraphDriver (class in msticpy.data.drivers.security_graph_driver) SecurityGroup (class in msticpy.datamodel.entities.security_group) sel_fmt() (in module msticpy.config.query_editor) SelectAlert (class in msticpy.nbwidgets.select_alert) selected_alert (msticpy.nbwidgets.select_alert.AlertSelector attribute) (msticpy.nbwidgets.select_alert.SelectAlert attribute) selected_columns (msticpy.vis.data_viewer.DataTableColumnChooser property) (msticpy.vis.data_viewer_panel.DataTableColumnChooser property) selected_dset (msticpy.vis.mordor_browser.MordorBrowser property) selected_items (msticpy.nbwidgets.select_subset.SelectSubset property) selected_values (msticpy.nbwidgets.select_subset.SelectSubset property) SelectItem (class in msticpy.nbwidgets.select_item) SelectString (class in msticpy.nbwidgets.select_item) SelectSubset (class in msticpy.nbwidgets.select_subset) Sender (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) SenderIP (msticpy.datamodel.entities.mail_message.MailMessage attribute) SenderIp (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) SentinelAlert (class in msticpy.datamodel.soc.sentinel_alert) SentinelQuery (class in msticpy.data.drivers.sentinel_query_reader) SerialNumber (msticpy.datamodel.entities.iot_device.IoTDevice attribute) service_queries (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver property) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) (msticpy.data.drivers.cybereason_driver.CybereasonDriver property) (msticpy.data.drivers.driver_base.DriverBase property) (msticpy.data.drivers.elastic_driver.ElasticDriver property) (msticpy.data.drivers.kql_driver.KqlDriver property) (msticpy.data.drivers.kusto_driver.KustoDriver property) (msticpy.data.drivers.local_data_driver.LocalDataDriver property) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver property) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver property) (msticpy.data.drivers.mdatp_driver.MDATPDriver property) (msticpy.data.drivers.mordor_driver.MordorDriver property) (msticpy.data.drivers.odata_driver.OData property) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver property) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver property) (msticpy.data.drivers.splunk_driver.SplunkDriver property) (msticpy.data.drivers.sumologic_driver.SumologicDriver property) ServiceNow (class in msticpy.context.contextproviders.servicenow) ServicePrincipal (class in msticpy.datamodel.entities.service_principal) ServicePrincipalName (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) ServicePrincipalObjectId (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) ServicePrincipalType (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) SessionId (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) sessionize_data() (in module msticpy.analysis.anomalous_sequence.sessionize) SessionType (class in msticpy.analysis.anomalous_sequence.model) set_axes_and_grids() (in module msticpy.vis.timeline_common) set_cluster() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) set_config() (in module msticpy.common.pkg_config) set_database() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) set_driver_property() (msticpy.data.drivers.azure_kusto_driver.AzureKustoDriver method) (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver method) (msticpy.data.drivers.cybereason_driver.CybereasonDriver method) (msticpy.data.drivers.driver_base.DriverBase method) (msticpy.data.drivers.elastic_driver.ElasticDriver method) (msticpy.data.drivers.kql_driver.KqlDriver method) (msticpy.data.drivers.kusto_driver.KustoDriver method) (msticpy.data.drivers.local_data_driver.LocalDataDriver method) (msticpy.data.drivers.local_osquery_driver.OSQueryLogDriver method) (msticpy.data.drivers.local_velociraptor_driver.VelociraptorLogDriver method) (msticpy.data.drivers.mdatp_driver.MDATPDriver method) (msticpy.data.drivers.mordor_driver.MordorDriver method) (msticpy.data.drivers.odata_driver.OData method) (msticpy.data.drivers.resource_graph_driver.ResourceGraphDriver method) (msticpy.data.drivers.security_graph_driver.SecurityGraphDriver method) (msticpy.data.drivers.splunk_driver.SplunkDriver method) (msticpy.data.drivers.sumologic_driver.SumologicDriver method) set_figure_size() (in module msticpy.vis.figure_dimension) set_help() (msticpy.config.comp_edit.CompEditHelp method) set_logging_level() (in module msticpy.init.logging) set_metadata() (msticpy.config.query_editor.MetadataEditWidget method) set_new_anomaly_threshold() (in module msticpy.analysis.timeseries) set_param_container() (msticpy.config.query_editor.QueryParameterEditWidget method) set_provider_state() (msticpy.context.contextlookup.ContextLookup method) (msticpy.context.lookup.Lookup method) (msticpy.context.tilookup.TILookup method) set_query_collection() (msticpy.config.query_editor.QueryEditWidget method) set_secret() (msticpy.auth.keyring_client.KeyringClient method) (msticpy.auth.keyvault_client.BHKeyVaultClient method) set_status() (msticpy.config.comp_edit.CEItemsBase method) (msticpy.config.comp_edit.CompEditFrame method) (msticpy.config.comp_edit.CompEditItems method) (msticpy.config.comp_edit.CompEditSimple method) (msticpy.config.comp_edit.CompEditStatusMixin method) (msticpy.config.mp_config_file.MpConfigFile method)

set_tab() (msticpy.config.comp_edit.CompEditTabs method) set_time() (msticpy.nbwidgets.query_time.QueryTime method) set_token() (msticpy.auth.cred_wrapper.CredentialWrapper method) set_unit_testing() (in module msticpy.common.utility.package) setdefault() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) settings (msticpy.common.wsconfig.WorkspaceConfig property) settings_path (msticpy.common.wsconfig.WorkspaceConfig property) SettingsControl (class in msticpy.config.comp_edit) SettingsDict (class in msticpy.common.pkg_config) setup_logging() (in module msticpy.init.logging) severity (msticpy.context.tiproviders.result_severity.LookupResult attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) Severity (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) SHA1 (msticpy.datamodel.entities.entity_enums.Algorithm attribute) Sha1 (msticpy.datamodel.entities.file.File attribute) sha1 (msticpy.transform.base64unpack.BinaryRecord attribute) sha1_hash (msticpy.transform.iocextract.IoCType attribute) SHA1_REGEX (msticpy.transform.iocextract.IoCExtract attribute) SHA256 (msticpy.datamodel.entities.entity_enums.Algorithm attribute) Sha256 (msticpy.datamodel.entities.file.File attribute) sha256 (msticpy.transform.base64unpack.BinaryRecord attribute) sha256_hash (msticpy.transform.iocextract.IoCType attribute) SHA256_REGEX (msticpy.transform.iocextract.IoCExtract attribute) SHA256AC (msticpy.datamodel.entities.entity_enums.Algorithm attribute) Sha256Ac (msticpy.datamodel.entities.file.File attribute) SharedProperty (class in msticpy.common.data_types) short_name (msticpy.datamodel.entities.entity_enums.RegistryHive property) (msticpy.init.pivot_init.pivot_data_queries.PivQuerySettings attribute) show() (msticpy.nbwidgets.progress.Progress method) (msticpy.vis.data_viewer.DataViewerBokeh method) show_kv_secrets() (msticpy.config.mp_config_file.MpConfigFile method) Sid (msticpy.datamodel.entities.account.Account attribute) SID (msticpy.datamodel.entities.security_group.SecurityGroup attribute) SIGNATURE (msticpy.context.tiproviders.mblookup.MBEntityType attribute) signed_session() (msticpy.auth.cred_wrapper.CredentialWrapper method) simulation (msticpy.data.drivers.mordor_driver.MordorEntry attribute) singleton() (in module msticpy.common.utility.types) SingletonArgsClass (class in msticpy.common.utility.types) SingletonClass (class in msticpy.common.utility.types) SIProcess (class in msticpy.context.vtlookupv3.vtfile_behavior) size (msticpy.vis.timeline.PlotParams attribute) sort (msticpy.vis.matrix_plot.PlotParams attribute) sort() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) sort_x (msticpy.vis.matrix_plot.PlotParams attribute) sort_y (msticpy.vis.matrix_plot.PlotParams attribute) SOURCE (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) Source (msticpy.datamodel.entities.iot_device.IoTDevice attribute) (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) source_columns (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) source_file_name (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) source_index (msticpy.transform.proc_tree_schema.ColNames attribute) source_index_par (msticpy.transform.proc_tree_schema.ColNames attribute) SOURCE_TYPE (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) SourceAddress (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) SourcePort (msticpy.datamodel.entities.network_connection.NetworkConnection attribute) SourceRef (msticpy.datamodel.entities.iot_device.IoTDevice attribute) sources (msticpy.data.core.query_template.QueryCollection attribute) sp_client_id_name (msticpy.init.azure_synapse_tools.SynapseName attribute) sp_client_sec_name (msticpy.init.azure_synapse_tools.SynapseName attribute) SparkUtilsPlaceHolder (class in msticpy.init.azure_synapse_tools) SplitProperty (class in msticpy.common.data_types) Splunk (msticpy.data.core.query_defns.DataEnvironment attribute) (msticpy.data.core.query_defns.DataFamily attribute) SplunkDriver (class in msticpy.data.drivers.splunk_driver) SplunkUploader (class in msticpy.data.uploaders.splunk_uploader) sql_to_kql() (in module msticpy.data.sql_to_kql) src_class (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) src_config_entry (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) src_config_path (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) src_func_name (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) src_module (msticpy.init.pivot_core.pivot_register.PivotRegistration attribute) ssl_abuse_list (msticpy.context.domain_utils.DomainValidator property) start (msticpy.common.timespan.TimeSpan property) (msticpy.nbwidgets.query_time.QueryTime property) StartTime (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession attribute) StartTimeUtc (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.entities.host_logon_session.HostLogonSession attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) State (msticpy.datamodel.entities.geo_location.GeoLocation attribute) StateMatrix (class in msticpy.analysis.anomalous_sequence.utils.data_structures) status (msticpy.context.lookup_result.SanitizedObservable attribute) (msticpy.context.tiproviders.result_severity.LookupResult attribute) (msticpy.context.vtlookupv3.vtlookup.DuplicateStatus attribute) step_type (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep attribute) (msticpy.init.pivot_core.pivot_pipeline.PipelineStep attribute) storage_account (msticpy.init.azure_synapse_tools.SynapseName property) storage_account_prefix (msticpy.init.azure_synapse_tools.SynapseName attribute) string_empty() (in module msticpy.common.utility.format) sub_type (msticpy.context.http_provider.APILookupParams attribute) Subject (msticpy.datamodel.entities.mail_message.MailMessage attribute) (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) SubmissionDate (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) SubmissionId (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) SubmissionMail (class in msticpy.datamodel.entities.submission_mail) Submitter (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) subscription_filter() (msticpy.nbtools.security_alert.SecurityAlert method) (msticpy.nbtools.security_base.SecurityBase method) (msticpy.nbtools.security_event.SecurityEvent method) SUBSCRIPTION_ID (msticpy.common.wsconfig.WorkspaceConfig attribute) SubscriptionId (msticpy.datamodel.entities.azure_resource.AzureResource property) suffixes (msticpy.auth.cloud_mappings.AzureCloudConfig property) summary_item_id (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) Sumologic (msticpy.data.core.query_defns.DataEnvironment attribute) (msticpy.data.core.query_defns.DataFamily attribute) SumologicDriver (class in msticpy.data.drivers.sumologic_driver) supported_ioc_types (msticpy.context.vtlookupv3.vtlookup.VTLookup property) supported_types (msticpy.context.contextproviders.context_provider_base.ContextProvider property) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider property) (msticpy.context.contextproviders.servicenow.ServiceNow property) (msticpy.context.http_provider.HttpProvider property) (msticpy.context.provider_base.Provider property) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB property) (msticpy.context.tiproviders.alienvault_otx.OTX property) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI property) (msticpy.context.tiproviders.binaryedge.BinaryEdge property) (msticpy.context.tiproviders.crowdsec.CrowdSec property) (msticpy.context.tiproviders.greynoise.GreyNoise property) (msticpy.context.tiproviders.ibm_xforce.XForce property) (msticpy.context.tiproviders.intsights.IntSights property) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore property) (msticpy.context.tiproviders.kql_base.KqlTIProvider property) (msticpy.context.tiproviders.open_page_rank.OPR property) (msticpy.context.tiproviders.pulsedive.Pulsedive property) (msticpy.context.tiproviders.riskiq.RiskIQ property) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider property) (msticpy.context.tiproviders.ti_provider_base.TIProvider property) (msticpy.context.tiproviders.tor_exit_nodes.Tor property) (msticpy.context.tiproviders.virustotal.VirusTotal property) supported_vt_types (msticpy.context.vtlookupv3.vtlookup.VTLookup property) (msticpy.context.vtlookupv3.vtlookupv3.VTLookupV3 property) SUPPORTS_ASYNC (msticpy.data.drivers.driver_base.DriverProps attribute) SUPPORTS_THREADING (msticpy.data.drivers.driver_base.DriverProps attribute) svc_type (msticpy.init.azure_synapse_tools.LinkedService property) SynapseName (class in msticpy.init.azure_synapse_tools) SystemAlertId (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) SystemAlertIds (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute)

T

tab_controls (msticpy.config.comp_edit.CompEditTabs property) tab_names (msticpy.config.comp_edit.CompEditTabs property) table (msticpy.init.pivot_init.pivot_data_queries.QueryParams attribute) tactics (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) tactics_full (msticpy.data.drivers.mordor_driver.MitreAttack property) TAG (msticpy.context.tiproviders.mblookup.MBEntityType attribute) tags (msticpy.analysis.observationlist.Observation attribute) (msticpy.data.core.query_template.QueryMetadata attribute) (msticpy.data.drivers.mordor_driver.MordorEntry attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) TARGET (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) target_logon_id (msticpy.transform.proc_tree_schema.ProcSchema attribute) TARGET_TYPE (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) technique_desc (msticpy.data.drivers.mordor_driver.MitreAttack property) technique_name (msticpy.data.drivers.mordor_driver.MitreAttack property) technique_uri (msticpy.data.drivers.mordor_driver.MitreAttack property) techniques (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem attribute) tee() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) tee_exec() (msticpy.init.pivot_core.pivot_pd_accessor.PivotAccessor method) TELFHASH (msticpy.context.tiproviders.mblookup.MBEntityType attribute) TemplateLine (class in msticpy.transform.process_tree_utils) TENANT_ID (msticpy.common.wsconfig.WorkspaceConfig attribute) tenant_id (msticpy.data.drivers.azure_kusto_driver.KustoConfig attribute) TENANT_ID (msticpy.data.drivers.azure_kusto_driver.KustoConfig.ConfigFields attribute) TenantId (msticpy.datamodel.entities.oauth_application.OAuthApplication attribute) (msticpy.datamodel.entities.service_principal.ServicePrincipal attribute) testing (msticpy.config.comp_edit.CEItemsBase attribute) (msticpy.config.comp_edit.CompEditFrame attribute) (msticpy.config.comp_edit.CompEditItems attribute) (msticpy.config.comp_edit.CompEditSimple attribute) (msticpy.config.comp_edit.CompEditStatusMixin attribute) (msticpy.config.mp_config_file.MpConfigFile attribute) text (msticpy.init.pivot_core.pivot_pipeline.PipelineExecStep attribute) THREAT (msticpy.context.tiproviders.pulsedive.PDEntityType attribute) ThreatDescription (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) ThreatDetectionMethods (msticpy.datamodel.entities.mail_message.MailMessage attribute) Threatintelligence (class in msticpy.datamodel.entities.threat_intelligence) ThreatIntelligence (msticpy.datamodel.entities.ip_address.IpAddress attribute) ThreatName (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) Threats (msticpy.datamodel.entities.mail_cluster.MailCluster attribute) (msticpy.datamodel.entities.mail_message.MailMessage attribute) ThreatType (msticpy.datamodel.entities.threat_intelligence.Threatintelligence attribute) ti_details_display() (in module msticpy.vis.ti_browser) TILookup (class in msticpy.context.tilookup) time_column (msticpy.analysis.observationlist.Observation attribute) (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) time_offset (msticpy.context.vtlookupv3.vtfile_behavior.SIProcess attribute) time_span (msticpy.analysis.observationlist.Observation attribute) time_stamp (msticpy.transform.proc_tree_schema.ProcSchema attribute) timeline() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) timeline_duration() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) timeline_values() (msticpy.vis.mp_pandas_plot.MsticpyPlotAccessor method) TimeLineAccessor (class in msticpy.vis.timeline_pd_accessor) timeseries_anomalies_stl() (in module msticpy.analysis.timeseries) TimeSpan (class in msticpy.common.timespan) timespan (msticpy.nbwidgets.query_time.QueryTime property) timestamp (msticpy.analysis.observationlist.Observation attribute) Timestamp (msticpy.datamodel.entities.submission_mail.SubmissionMail attribute) timestamp_orig_par (msticpy.transform.proc_tree_schema.ColNames attribute) timestamps_to_utcdate() (in module msticpy.context.vtlookupv3.vtlookupv3) TimeUnit (class in msticpy.nbwidgets.core) TIPivotProvider (class in msticpy.context.tiproviders.ti_provider_base) TIProvider (class in msticpy.context.tiproviders.ti_provider_base) title (msticpy.data.drivers.mordor_driver.MordorEntry attribute) (msticpy.vis.matrix_plot.PlotParams attribute) (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) TLSH (msticpy.context.tiproviders.mblookup.MBEntityType attribute) to_api_dict() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummaryItem method) to_bytes() (msticpy.nbwidgets.core.TimeUnit method) to_df() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary method) (msticpy.vis.entity_graph_tools.EntityGraph method) to_graph() (msticpy.init.mp_pandas_accessors.MsticpyCoreAccessor method) to_html() (in module msticpy.vis.code_view) (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) (msticpy.nbtools.security_alert.SecurityAlert method) (msticpy.nbtools.security_base.SecurityBase method) (msticpy.nbtools.security_event.SecurityEvent method)

to_json() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary method) (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) to_json_api() (msticpy.context.azure.sentinel_dynamic_summary_types.DynamicSummary method) to_networkx() (msticpy.datamodel.entities.account.Account method) (msticpy.datamodel.entities.alert.Alert method) (msticpy.datamodel.entities.azure_resource.AzureResource method) (msticpy.datamodel.entities.cloud_application.CloudApplication method) (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession method) (msticpy.datamodel.entities.dns.Dns method) (msticpy.datamodel.entities.entity.Entity method) (msticpy.datamodel.entities.file.File method) (msticpy.datamodel.entities.file_hash.FileHash method) (msticpy.datamodel.entities.geo_location.GeoLocation method) (msticpy.datamodel.entities.host.Host method) (msticpy.datamodel.entities.host_logon_session.HostLogonSession method) (msticpy.datamodel.entities.iot_device.IoTDevice method) (msticpy.datamodel.entities.Ip method) (msticpy.datamodel.entities.ip_address.IpAddress method) (msticpy.datamodel.entities.Machine method) (msticpy.datamodel.entities.mail_cluster.MailCluster method) (msticpy.datamodel.entities.mail_message.MailMessage method) (msticpy.datamodel.entities.mailbox.Mailbox method) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration method) (msticpy.datamodel.entities.malware.Malware method) (msticpy.datamodel.entities.network_connection.NetworkConnection method) (msticpy.datamodel.entities.oauth_application.OAuthApplication method) (msticpy.datamodel.entities.process.Process method) (msticpy.datamodel.entities.registry_key.RegistryKey method) (msticpy.datamodel.entities.registry_value.RegistryValue method) (msticpy.datamodel.entities.security_group.SecurityGroup method) (msticpy.datamodel.entities.service_principal.ServicePrincipal method) (msticpy.datamodel.entities.submission_mail.SubmissionMail method) (msticpy.datamodel.entities.threat_intelligence.Threatintelligence method) (msticpy.datamodel.entities.unknown_entity.UnknownEntity method) (msticpy.datamodel.entities.url.Url method) (msticpy.datamodel.entities.User method) (msticpy.datamodel.soc.incident.Incident method) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert method) to_yaml() (msticpy.init.pivot_core.pivot_pipeline.Pipeline method) token (msticpy.auth.msal_auth.MSALDelegatedAuth property) token_count() (in module msticpy.analysis.eventcluster) token_count_df() (in module msticpy.analysis.eventcluster) token_uri (msticpy.auth.cloud_mappings.AzureCloudConfig property) Tor (class in msticpy.context.tiproviders.tor_exit_nodes) train() (msticpy.analysis.anomalous_sequence.model.Model method) tree_to_text() (in module msticpy.transform.process_tree_utils) TreeResult (class in msticpy.vis.process_tree) trigger_operator (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) trigger_threshold (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) ts_anomalies_stl() (in module msticpy.analysis.timeseries) txt_fmt() (in module msticpy.config.query_editor) txtarea_fmt() (in module msticpy.config.query_editor) TYPE (msticpy.context.vtlookupv3.vtlookupv3.ColumnNames attribute) type (msticpy.data.drivers.mordor_driver.MordorEntry attribute) (msticpy.init.pivot_init.pivot_data_queries.ParamAttrs attribute) type_widget (msticpy.config.query_editor.QueryParameterEditWidget attribute)

U

unescape_windows_path() (in module msticpy.common.utility.format) unit_testing() (in module msticpy.common.utility.package) units (msticpy.nbwidgets.query_time.QueryTime property) unknown (msticpy.context.tiproviders.result_severity.ResultSeverity attribute) Unknown (msticpy.data.core.query_defns.DataEnvironment attribute) (msticpy.data.core.query_defns.DataFamily attribute) (msticpy.datamodel.entities.entity_enums.Algorithm attribute) unknown (msticpy.transform.iocextract.IoCType attribute) UnknownEntity (class in msticpy.datamodel.entities.unknown_entity) unpack() (in module msticpy.transform.base64unpack) unpack_auditd() (in module msticpy.transform.auditdextract) unpack_df() (in module msticpy.transform.base64unpack) unpack_items() (in module msticpy.transform.base64unpack) update() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method) update_progress() (msticpy.nbwidgets.progress.Progress method) upload_df() (msticpy.data.uploaders.loganalytics_uploader.LAUploader method) (msticpy.data.uploaders.splunk_uploader.SplunkUploader method) (msticpy.data.uploaders.uploader_base.UploaderBase method) upload_file() (msticpy.data.uploaders.loganalytics_uploader.LAUploader method) (msticpy.data.uploaders.splunk_uploader.SplunkUploader method) (msticpy.data.uploaders.uploader_base.UploaderBase method) upload_folder() (msticpy.data.uploaders.loganalytics_uploader.LAUploader method) (msticpy.data.uploaders.splunk_uploader.SplunkUploader method) (msticpy.data.uploaders.uploader_base.UploaderBase method) upload_to_blob() (msticpy.data.storage.azure_blob_storage.AzureBlobStorage method) UploaderBase (class in msticpy.data.uploaders.uploader_base) UPN (msticpy.datamodel.entities.account.Account attribute) Upn (msticpy.datamodel.entities.account.Account attribute), [1] (msticpy.datamodel.entities.mailbox.Mailbox attribute) (msticpy.datamodel.entities.mailbox_configuration.MailboxConfiguration attribute) UPN (msticpy.datamodel.entities.User attribute) Upn (msticpy.datamodel.entities.User attribute) UPNSuffix (msticpy.datamodel.entities.account.Account attribute) uri (msticpy.data.core.query_template.QueryArgs attribute) (msticpy.data.drivers.azure_kusto_driver.AuthParams attribute)

Url (class in msticpy.datamodel.entities.url) URL (msticpy.context.vtlookupv3.vtlookupv3.VTEntityType attribute) Url (msticpy.datamodel.entities.url.Url attribute) url (msticpy.transform.iocextract.IoCType attribute) url_components() (in module msticpy.context.domain_utils) URL_DF_REGEX (msticpy.transform.iocextract.IoCExtract attribute) url_endpoint (msticpy.data.drivers.azure_monitor_driver.AzureMonitorDriver property) URL_REGEX (msticpy.transform.iocextract.IoCExtract attribute) Urls (msticpy.datamodel.entities.mail_message.MailMessage attribute) usage() (msticpy.context.contextproviders.context_provider_base.ContextProvider class method) (msticpy.context.contextproviders.http_context_provider.HttpContextProvider class method) (msticpy.context.contextproviders.servicenow.ServiceNow class method) (msticpy.context.http_provider.HttpProvider class method) (msticpy.context.provider_base.Provider class method) (msticpy.context.tiproviders.abuseipdb.AbuseIPDB class method) (msticpy.context.tiproviders.alienvault_otx.OTX class method) (msticpy.context.tiproviders.azure_sent_byoti.AzSTI class method) (msticpy.context.tiproviders.binaryedge.BinaryEdge class method) (msticpy.context.tiproviders.crowdsec.CrowdSec class method) (msticpy.context.tiproviders.greynoise.GreyNoise class method) (msticpy.context.tiproviders.ibm_xforce.XForce class method) (msticpy.context.tiproviders.intsights.IntSights class method) (msticpy.context.tiproviders.ip_quality_score.IPQualityScore class method) (msticpy.context.tiproviders.kql_base.KqlTIProvider class method) (msticpy.context.tiproviders.open_page_rank.OPR class method) (msticpy.context.tiproviders.pulsedive.Pulsedive class method) (msticpy.context.tiproviders.riskiq.RiskIQ class method) (msticpy.context.tiproviders.ti_http_provider.HttpTIProvider class method) (msticpy.context.tiproviders.ti_provider_base.TIProvider class method) (msticpy.context.tiproviders.tor_exit_nodes.Tor class method) (msticpy.context.tiproviders.virustotal.VirusTotal class method) USE_QUERY_PATHS (msticpy.data.drivers.driver_base.DriverProps attribute) User (class in msticpy.datamodel.entities) user_id (msticpy.transform.proc_tree_schema.ProcSchema attribute) user_name (msticpy.transform.proc_tree_schema.ProcSchema attribute) UserAgent (msticpy.datamodel.entities.cloud_logon_session.CloudLogonSession attribute)

V

valid_pyname() (in module msticpy.common.utility.format) valid_type() (msticpy.data.drivers.driver_base.DriverProps class method) validate() (msticpy.data.core.query_source.QuerySource method) (msticpy.transform.iocextract.IoCExtract method) validate_config() (in module msticpy.common.pkg_config) validate_query_defs() (in module msticpy.data.core.data_query_reader) validate_settings() (msticpy.config.mp_config_file.MpConfigFile method) validate_tld() (msticpy.context.domain_utils.DomainValidator static method) value (msticpy.config.comp_edit.SettingsControl property) Value (msticpy.datamodel.entities.file_hash.FileHash attribute) (msticpy.datamodel.entities.registry_value.RegistryValue attribute) value (msticpy.nbwidgets.get_environment_key.GetEnvironmentKey property) (msticpy.nbwidgets.get_text.GetText property) (msticpy.nbwidgets.lookback.Lookback property) (msticpy.nbwidgets.option_buttons.OptionButtons attribute) (msticpy.nbwidgets.progress.Progress property) (msticpy.nbwidgets.query_time.QueryTime property) (msticpy.nbwidgets.select_alert.AlertSelector property) (msticpy.nbwidgets.select_alert.SelectAlert property) (msticpy.nbwidgets.select_item.SelectItem property) (msticpy.nbwidgets.select_item.SelectString property) (msticpy.nbwidgets.select_subset.SelectSubset property) value_col (msticpy.vis.matrix_plot.PlotParams attribute) values() (msticpy.analysis.anomalous_sequence.utils.data_structures.StateMatrix method) (msticpy.common.pkg_config.SettingsDict method) (msticpy.common.provider_settings.ProviderArgs method)

ValueType (msticpy.datamodel.entities.registry_value.RegistryValue attribute) vault_name (msticpy.auth.keyvault_client.BHKeyVaultClient property) Velociraptor (msticpy.data.core.query_defns.DataEnvironment attribute) VelociraptorLogDriver (class in msticpy.data.drivers.local_velociraptor_driver) VelociraptorLogs (msticpy.data.core.query_defns.DataEnvironment attribute) VendorName (msticpy.datamodel.entities.alert.Alert attribute) (msticpy.datamodel.soc.sentinel_alert.SentinelAlert attribute) verb (msticpy.context.http_provider.APILookupParams attribute) version (msticpy.data.core.query_template.QueryMetadata attribute) (msticpy.data.drivers.sentinel_query_reader.SentinelQuery attribute) view() (msticpy.init.mp_pandas_accessors.MsticpyCoreAccessor method) view_settings() (msticpy.config.mp_config_file.MpConfigFile method) VirusTotal (class in msticpy.context.tiproviders.virustotal) visualise_scored_sessions() (in module msticpy.analysis.anomalous_sequence.anomalous) VTAPIScope (class in msticpy.init.pivot_init.vt_pivot) VTEntityType (class in msticpy.context.vtlookupv3.vtlookupv3) VTFileBehavior (class in msticpy.context.vtlookupv3.vtfile_behavior) VTLookup (class in msticpy.context.vtlookupv3.vtlookup) VTLookupV3 (class in msticpy.context.vtlookupv3.vtlookupv3) VTObjectBrowser (class in msticpy.vis.vtobject_browser) VTObjectProperties (class in msticpy.context.vtlookupv3.vtlookupv3) VTParams (class in msticpy.context.vtlookupv3.vtlookup)

W

warning (msticpy.context.tiproviders.result_severity.ResultSeverity attribute) WEEK (msticpy.nbwidgets.core.TimeUnit attribute) whois() (msticpy.init.mp_pandas_accessors.MsticpyCoreAccessor method) width (msticpy.vis.matrix_plot.PlotParams attribute) (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) Windows (msticpy.datamodel.entities.entity_enums.OSFamily attribute) windows_path (msticpy.transform.iocextract.IoCType attribute) WindowsSecurity (msticpy.data.core.query_defns.DataFamily attribute) WINPATH_REGEX (msticpy.transform.iocextract.IoCExtract attribute) with_traceback() (msticpy.common.exceptions.MsticpyAzureConfigError method) (msticpy.common.exceptions.MsticpyAzureConnectionError method) (msticpy.common.exceptions.MsticpyConfigError method) (msticpy.common.exceptions.MsticpyConnectionError method) (msticpy.common.exceptions.MsticpyDataQueryError method) (msticpy.common.exceptions.MsticpyException method) (msticpy.common.exceptions.MsticpyImportExtraError method) (msticpy.common.exceptions.MsticpyKeyVaultConfigError method) (msticpy.common.exceptions.MsticpyKeyVaultMissingSecretError method) (msticpy.common.exceptions.MsticpyKqlConnectionError method) (msticpy.common.exceptions.MsticpyMissingDependencyError method) (msticpy.common.exceptions.MsticpyNoDataSourceError method) (msticpy.common.exceptions.MsticpyNotConnectedError method) (msticpy.common.exceptions.MsticpyParameterError method) (msticpy.common.exceptions.MsticpyResourceError method) (msticpy.common.exceptions.MsticpyUserConfigError method) (msticpy.common.exceptions.MsticpyUserError method) (msticpy.context.geoip.GeoIPDatabaseError method) (msticpy.context.tiproviders.riskiq.RiskIQAPIUserError method) (msticpy.context.tiproviders.riskiq.RiskIQUserError method) (msticpy.context.vtlookupv3.vtlookupv3.MsticpyVTGraphSaveGraphError method) (msticpy.context.vtlookupv3.vtlookupv3.MsticpyVTNoDataError method) (msticpy.transform.proc_tree_schema.ProcessTreeSchemaException method)

WORKSPACE_ID (msticpy.common.wsconfig.WorkspaceConfig attribute) WORKSPACE_NAME (msticpy.common.wsconfig.WorkspaceConfig attribute) workspace_name (msticpy.init.azure_synapse_tools.MPSparkUtils property) WorkspaceConfig (class in msticpy.common.wsconfig) wrap (msticpy.transform.process_tree_utils.TemplateLine attribute) write_to_yaml() (in module msticpy.data.drivers.sentinel_query_reader)

X

x (msticpy.vis.matrix_plot.PlotParams attribute) x_col (msticpy.vis.matrix_plot.PlotParams attribute) x_column (msticpy.vis.matrix_plot.PlotParams property)

XForce (class in msticpy.context.tiproviders.ibm_xforce) xgrid (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute)

Y

y (msticpy.vis.matrix_plot.PlotParams attribute) y_col (msticpy.vis.matrix_plot.PlotParams attribute) y_column (msticpy.vis.matrix_plot.PlotParams property) YARA (msticpy.context.tiproviders.mblookup.MBEntityType attribute) yaxis (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute)

ygrid (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute) ylabel_cols (msticpy.vis.timeline.PlotParams attribute) (msticpy.vis.timeline_duration.PlotParams attribute) (msticpy.vis.timeline_values.PlotParams attribute)