msticpy.context package

Context Providers Subpackage.

Subpackages

• msticpy.context.azure package
  • Submodules
    • msticpy.context.azure.azure_data module
      • AzureData
      • InterfaceItems
      • Items
      • NsgItems
      • get_api_headers()
      • get_token()
    • msticpy.context.azure.sentinel_analytics module
      • SentinelAnalyticsMixin
      • SentinelHuntingMixin
    • msticpy.context.azure.sentinel_bookmarks module
      • SentinelBookmarksMixin
    • msticpy.context.azure.sentinel_core module
      • AzureSentinel
      • MicrosoftSentinel
    • msticpy.context.azure.sentinel_dynamic_summary module
      • SentinelDynamicSummaryMixin
      • SentinelQueryProvider
    • msticpy.context.azure.sentinel_dynamic_summary_types module
      • DynamicSummary
      • DynamicSummaryItem
      • FieldList
      • df_to_dynamic_summaries()
      • df_to_dynamic_summary()
    • msticpy.context.azure.sentinel_incidents module
      • SentinelIncidentsMixin
    • msticpy.context.azure.sentinel_search module
      • SentinelSearchlistsMixin
    • msticpy.context.azure.sentinel_ti module
      • SentinelTIMixin
    • msticpy.context.azure.sentinel_utils module
      • SentinelInstanceDetails
      • SentinelUtilsMixin
      • build_sentinel_resource_id()
      • extract_sentinel_response()
      • parse_resource_id()
      • validate_resource_id()
    • msticpy.context.azure.sentinel_watchlists module
      • SentinelWatchlistsMixin
    • msticpy.context.azure.sentinel_workspaces module
      • ParsedUrlComponents
      • SentinelWorkspacesMixin
• msticpy.context.contextproviders package
  • Submodules
    • msticpy.context.contextproviders.context_provider_base module
      • ContextProvider
    • msticpy.context.contextproviders.http_context_provider module
      • HttpContextProvider
    • msticpy.context.contextproviders.servicenow module
      • ServiceNow
• msticpy.context.tiproviders package
  • Submodules
    • msticpy.context.tiproviders.abuseipdb module
      • AbuseIPDB
    • msticpy.context.tiproviders.alienvault_otx module
      • OTX
    • msticpy.context.tiproviders.azure_sent_byoti module
      • AzSTI
    • msticpy.context.tiproviders.binaryedge module
      • BinaryEdge
    • msticpy.context.tiproviders.crowdsec module
      • CrowdSec
    • msticpy.context.tiproviders.greynoise module
      • GreyNoise
    • msticpy.context.tiproviders.ibm_xforce module
      • XForce
    • msticpy.context.tiproviders.intsights module
      • IntSights
    • msticpy.context.tiproviders.ip_quality_score module
      • IPQualityScore
    • msticpy.context.tiproviders.kql_base module
      • KqlTIProvider
    • msticpy.context.tiproviders.mblookup module
      • MBEntityType
      • MBlookup
    • msticpy.context.tiproviders.open_page_rank module
      • OPR
    • msticpy.context.tiproviders.pulsedive module
      • PDEntityType
      • PDQuery
      • PDlookup
      • Pulsedive
    • msticpy.context.tiproviders.result_severity module
      • LookupResult
      • ResultSeverity
    • msticpy.context.tiproviders.riskiq module
      • RiskIQ
      • RiskIQAPIUserError
      • RiskIQUserError
    • msticpy.context.tiproviders.ti_http_provider module
      • HttpTIProvider
    • msticpy.context.tiproviders.ti_provider_base module
      • TIPivotProvider
      • TIProvider
    • msticpy.context.tiproviders.tor_exit_nodes module
      • Tor
    • msticpy.context.tiproviders.virustotal module
      • VirusTotal
• msticpy.context.vtlookupv3 package
  • Submodules
    • msticpy.context.vtlookupv3.vtfile_behavior module
      • SIProcess
      • VTFileBehavior
    • msticpy.context.vtlookupv3.vtlookup module
      • DuplicateStatus
      • VTLookup
      • VTParams
    • msticpy.context.vtlookupv3.vtlookupv3 module
      • ColumnNames
      • MsticpyVTGraphSaveGraphError
      • MsticpyVTNoDataError
      • VTEntityType
      • VTLookupV3
      • VTObjectProperties
      • timestamps_to_utcdate()

Submodules

• msticpy.context.contextlookup module
  • ContextLookup
    • ContextLookup.CUSTOM_PROVIDERS
    • ContextLookup.PACKAGE
    • ContextLookup.PROVIDERS
    • ContextLookup.add_provider()
    • ContextLookup.available_providers
    • ContextLookup.browse()
    • ContextLookup.browse_results()
    • ContextLookup.configured_providers
    • ContextLookup.disable_provider()
    • ContextLookup.enable_provider()
    • ContextLookup.import_provider()
    • ContextLookup.list_available_providers()
    • ContextLookup.loaded_providers
    • ContextLookup.lookup_item()
    • ContextLookup.lookup_items()
    • ContextLookup.lookup_items_sync()
    • ContextLookup.lookup_observable()
    • ContextLookup.lookup_observables()
    • ContextLookup.lookup_observables_sync()
    • ContextLookup.provider_status
    • ContextLookup.provider_usage()
    • ContextLookup.reload_provider_settings()
    • ContextLookup.reload_providers()
    • ContextLookup.result_to_df()
    • ContextLookup.set_provider_state()
• msticpy.context.domain_utils module
  • DomainValidator
    • DomainValidator.in_abuse_list()
    • DomainValidator.is_resolvable()
    • DomainValidator.ssl_abuse_list
    • DomainValidator.validate_tld()
  • dns_components()
  • dns_resolve()
  • dns_resolve_df()
  • ip_rev_resolve()
  • ip_rev_resolve_df()
  • screenshot()
  • url_components()
• msticpy.context.geoip module
  • GeoIPDatabaseError
    • GeoIPDatabaseError.args
    • GeoIPDatabaseError.with_traceback()
  • GeoIpLookup
    • GeoIpLookup.df_lookup_ip()
    • GeoIpLookup.lookup_ip()
    • GeoIpLookup.lookup_ips()
    • GeoIpLookup.print_license()
  • IPStackLookup
    • IPStackLookup.df_lookup_ip()
    • IPStackLookup.lookup_ip()
    • IPStackLookup.lookup_ips()
    • IPStackLookup.print_license()
  • entity_distance()
  • geo_distance()
• msticpy.context.http_provider module
  • APILookupParams
    • APILookupParams.auth_str
    • APILookupParams.auth_type
    • APILookupParams.data
    • APILookupParams.full_url
    • APILookupParams.headers
    • APILookupParams.params
    • APILookupParams.path
    • APILookupParams.sub_type
    • APILookupParams.verb
  • HttpProvider
    • HttpProvider.is_known_type()
    • HttpProvider.is_supported_type()
    • HttpProvider.item_query_defs
    • HttpProvider.lookup_item()
    • HttpProvider.lookup_items()
    • HttpProvider.lookup_items_async()
    • HttpProvider.name
    • HttpProvider.resolve_item_type()
    • HttpProvider.supported_types
    • HttpProvider.usage()
• msticpy.context.ip_utils module
  • IpWhoisAccessor
    • IpWhoisAccessor.lookup()
  • convert_to_ip_entities()
  • create_ip_record()
  • get_asn_details()
  • get_asn_from_ip()
  • get_asn_from_name()
  • get_ip_type()
  • get_whois_df()
  • get_whois_info()
  • ip_whois()
• msticpy.context.lookup module
  • Lookup
    • Lookup.CUSTOM_PROVIDERS
    • Lookup.PACKAGE
    • Lookup.PROVIDERS
    • Lookup.add_provider()
    • Lookup.available_providers
    • Lookup.browse()
    • Lookup.browse_results()
    • Lookup.configured_providers
    • Lookup.disable_provider()
    • Lookup.enable_provider()
    • Lookup.import_provider()
    • Lookup.list_available_providers()
    • Lookup.loaded_providers
    • Lookup.lookup_item()
    • Lookup.lookup_items()
    • Lookup.lookup_items_sync()
    • Lookup.provider_status
    • Lookup.provider_usage()
    • Lookup.reload_provider_settings()
    • Lookup.reload_providers()
    • Lookup.result_to_df()
    • Lookup.set_provider_state()
  • ProgressCounter
    • ProgressCounter.decrement()
    • ProgressCounter.get_remaining()
• msticpy.context.lookup_result module
  • LookupStatus
    • LookupStatus.BAD_FORMAT
    • LookupStatus.NOT_SUPPORTED
    • LookupStatus.NO_DATA
    • LookupStatus.OK
    • LookupStatus.OTHER
    • LookupStatus.QUERY_FAILED
  • SanitizedObservable
    • SanitizedObservable.count()
    • SanitizedObservable.index()
    • SanitizedObservable.observable
    • SanitizedObservable.status
• msticpy.context.preprocess_observable module
  • PreProcessor
    • PreProcessor.add_check()
    • PreProcessor.check()
    • PreProcessor.processors
  • get_schema_and_host()
  • preprocess_observable()
• msticpy.context.provider_base module
  • PivotProvider
    • PivotProvider.register_pivots()
  • Provider
    • Provider.is_known_type()
    • Provider.is_supported_type()
    • Provider.item_query_defs
    • Provider.lookup_item()
    • Provider.lookup_items()
    • Provider.lookup_items_async()
    • Provider.name
    • Provider.resolve_item_type()
    • Provider.supported_types
    • Provider.usage()
  • generate_items()
• msticpy.context.tilookup module
  • TILookup
    • TILookup.CUSTOM_PROVIDERS
    • TILookup.PACKAGE
    • TILookup.PROVIDERS
    • TILookup.add_provider()
    • TILookup.available_providers
    • TILookup.browse()
    • TILookup.browse_results()
    • TILookup.configured_providers
    • TILookup.disable_provider()
    • TILookup.enable_provider()
    • TILookup.import_provider()
    • TILookup.list_available_providers()
    • TILookup.loaded_providers
    • TILookup.lookup_ioc()
    • TILookup.lookup_iocs()
    • TILookup.lookup_iocs_sync()
    • TILookup.lookup_item()
    • TILookup.lookup_items()
    • TILookup.lookup_items_sync()
    • TILookup.provider_status
    • TILookup.provider_usage()
    • TILookup.reload_provider_settings()
    • TILookup.reload_providers()
    • TILookup.result_to_df()
    • TILookup.set_provider_state()