Notebook Examples

See the following notebooks for examples of the use of this package in practice:

Data

• Data Queries

• MDE Queries

• Splunk Data

• Azure Storage

• Mordor Data

• SQL to KQL conversion Notebook

Enrichment

• Threat Intel Providers Notebook

• GeoIP Lookup Notebook

• VirusTotal Lookup Notebook

• VirusTotal V3 API

• Azure Sentinel API

Analysis

• Anomalous Sequence Notebook

• Time Series Anomalies Notebook

• Event Clustering Tree Notebook

• Base64Unpack Notebook

• IoCExtract Notebook

• Pivot Functions

• Pivot Functions Intro

Visualization and Tools

• Notebooks Widgets and Tools

• Event Timeline Notebook

• Process Tree Notebook Notebook

• Folium Geo-map Notebook

Configuration

• MSTICPy Settings editor