msticpy.nbtools package

nbtools module - Notebook Security Tools.

This is a collection of modules with functionality (mostly) specific to notebooks. It also houses some visualization modules that will migrate to the vis sub-package.

• nbinit - notebook initialization

• azure_ml_tools - configuration and helpers for AML workspaces

• nbwidgets - ipywidgets-based UI components for infosec notebooks

• nbdisplay - miscellaneous display functions TBM to vis

Submodules

• msticpy.nbtools.data_viewer module
• msticpy.nbtools.entityschema module
• msticpy.nbtools.foliummap module
• msticpy.nbtools.morph_charts module
• msticpy.nbtools.nbdisplay module
• msticpy.nbtools.nbwidgets module
• msticpy.nbtools.observationlist module
• msticpy.nbtools.process_tree module
• msticpy.nbtools.security_alert module
  • SecurityAlert
    • SecurityAlert.computer
    • SecurityAlert.data_environment
    • SecurityAlert.data_family
    • SecurityAlert.entities
    • SecurityAlert.get_all_entities()
    • SecurityAlert.get_entities_of_type()
    • SecurityAlert.get_logon_id()
    • SecurityAlert.host_filter()
    • SecurityAlert.hostname
    • SecurityAlert.ids
    • SecurityAlert.is_in_azure_sub
    • SecurityAlert.is_in_log_analytics
    • SecurityAlert.is_in_workspace
    • SecurityAlert.origin_time
    • SecurityAlert.primary_account
    • SecurityAlert.primary_host
    • SecurityAlert.primary_process
    • SecurityAlert.properties
    • SecurityAlert.query_params
    • SecurityAlert.subscription_filter()
    • SecurityAlert.to_html()
• msticpy.nbtools.security_alert_graph module
  • add_related_alerts()
  • create_alert_graph()
• msticpy.nbtools.security_base module
  • SecurityBase
    • SecurityBase.computer
    • SecurityBase.data_environment
    • SecurityBase.data_family
    • SecurityBase.entities
    • SecurityBase.get_all_entities()
    • SecurityBase.get_entities_of_type()
    • SecurityBase.get_logon_id()
    • SecurityBase.host_filter()
    • SecurityBase.hostname
    • SecurityBase.ids
    • SecurityBase.is_in_azure_sub
    • SecurityBase.is_in_log_analytics
    • SecurityBase.is_in_workspace
    • SecurityBase.origin_time
    • SecurityBase.primary_account
    • SecurityBase.primary_host
    • SecurityBase.primary_process
    • SecurityBase.properties
    • SecurityBase.query_params
    • SecurityBase.subscription_filter()
    • SecurityBase.to_html()
• msticpy.nbtools.security_event module
  • SecurityEvent
    • SecurityEvent.computer
    • SecurityEvent.data_environment
    • SecurityEvent.data_family
    • SecurityEvent.entities
    • SecurityEvent.get_all_entities()
    • SecurityEvent.get_entities_of_type()
    • SecurityEvent.get_logon_id()
    • SecurityEvent.host_filter()
    • SecurityEvent.hostname
    • SecurityEvent.ids
    • SecurityEvent.is_in_azure_sub
    • SecurityEvent.is_in_log_analytics
    • SecurityEvent.is_in_workspace
    • SecurityEvent.origin_time
    • SecurityEvent.primary_account
    • SecurityEvent.primary_host
    • SecurityEvent.primary_process
    • SecurityEvent.properties
    • SecurityEvent.query_params
    • SecurityEvent.subscription_filter()
    • SecurityEvent.to_html()
• msticpy.nbtools.ti_browser module
• msticpy.nbtools.timeline module
• msticpy.nbtools.timeline_duration module
• msticpy.nbtools.timeline_pd_accessor module
• msticpy.nbtools.timeseries module
• msticpy.nbtools.utility module
• msticpy.nbtools.wsconfig module