Ian Hellen
503e6413ba
Updated Readme to point users to new GitHub location
2019-11-01 16:22:01 -07:00
yoshiomura
8af92bd7bf
added nbwidgets to load properly
2019-10-16 13:57:17 +09:00
Sridhar Periyasamy
ee74fc6256
Fix typo in command
2019-10-09 13:17:54 -07:00
Sridhar Periyasamy
12b9666f3d
Address feedback to use config.json to get tenantid and workspaceid.
2019-10-09 13:14:10 -07:00
Sridhar Periyasamy
f8cb8da3c7
Enable highlighting of neigbouring nodes on 'click' event.
...
Also add 'azure-cli-core' package dependency.
2019-10-08 17:26:07 -07:00
Sridhar Periyasamy
1efc7d4025
Initial commit for User Security Metadata notebook
...
This notebook will provide a step-by-step instrucstions on how to consume and understand the analytics data in Sentinel.
2019-10-07 14:25:58 -07:00
Zhipeng Zhao
903d07b36d
Changes based on comments
2019-10-03 13:18:44 -07:00
Zhipeng Zhao
9ae4c99f28
Hunting Bookmark Library
2019-10-01 16:56:31 -07:00
Zhipeng Zhao
98580f7db4
Drop AAD as well
2019-09-23 13:54:53 -07:00
Zhipeng Zhao
5b46e1e23a
Enable notebooks end-to-end test and clean up python modules
2019-09-20 16:55:32 -07:00
Zhipeng Zhao
136b237916
Update Anomaly Lookup due to Azure Cli changes
2019-08-28 11:08:44 -07:00
Zhipeng Zhao
122a922fdb
Anomaly lookup query update
2019-08-26 16:12:05 -07:00
Zhipeng Zhao
050a2b6ab1
Adding Anomaly Lookup notebook
2019-07-31 11:16:22 -07:00
Zhipeng Zhao
ec68aaba62
Renaming for PR
2019-07-30 14:38:05 -07:00
Zhipeng Zhao
ed356a799c
Python modules update for GA
2019-07-30 09:08:55 -07:00
Zhipeng Zhao
d25eead4ee
Remove notebooks
2019-06-14 11:33:57 -07:00
Zhipeng Zhao
0af727477d
Update Anomaly Lookup query and flow
2019-06-12 09:45:30 -07:00
Zhipeng Zhao
efe16f8d00
Add Forensics notebooks
2019-06-10 14:40:23 -07:00
zhzhao8888
df24aff12f
Merge pull request #172 from Azure/zhzhao8888/feature/forensics_mod
...
Initial check in for forensics python modules
2019-06-07 16:08:20 -07:00
Zhipeng Zhao
070313cafd
Add short documentation to modules
2019-06-07 14:44:40 -07:00
Zhipeng Zhao
593cc115a1
Initial check in for forensics python modules
2019-06-05 15:57:11 -07:00
Ian Hellen
ed682b155f
Import, browse, convert and run Sigma rules in Azure Sentinel
2019-05-31 11:14:47 -07:00
Ian Hellen
6e452f8108
Changes for part 3 of blog
2019-05-13 09:52:51 +03:00
juliango2100
b47cc9a9af
Removed wording
...
Removed wording regarding large enterprises...
2019-04-24 17:15:18 -07:00
Zhipeng Zhao
283e80754a
change all notebooks to 3.6
2019-04-23 17:17:49 -07:00
shainw
b63baac09d
Adding a couple of interesting queries I threw together while doing r… ( #142 )
...
* Adding a couple of interesting queries I threw together while doing research
* minor reformatting. put smaller table on LHS of join.
2019-04-15 13:57:44 +01:00
Ian Hellen
af1c58a953
Partial update of example notebook for blog.
...
Adding generic setup mini-notebook to remove repetetive code from start of notebooks.
2019-04-09 16:19:12 -07:00
Ian Hellen
53f4d0bf3c
Updates to sample notebook for blog
2019-04-05 19:43:59 -07:00
zhzhao8888
c516357aac
Add files via upload
2019-03-26 17:29:34 -07:00
zhzhao8888
8f7c2aa036
Add files via upload
2019-03-26 17:28:54 -07:00
zhzhao8888
8d949c16cd
Add files via upload
2019-03-26 17:28:28 -07:00
zhzhao8888
f7346d6ccb
Adding notebook for PowerShell
2019-03-19 17:24:21 -07:00
Ian Hellen
c57c96b9b2
Bug/reliability fixes for RSA based on new demo environment data and … ( #118 )
...
* Bug/reliability fixes for RSA based on new demo environment data and alert formats.
Added two reliable demo notebooks - Demo - Guided Hunting - Linux-Windows-Office and Demo - Guided Investigation - Process-Alerts - both reference V4 environment.
Change pip installs to always reference user locations - DSVM prevents machine installs if user is not admin.
* Couple of omissions
2019-03-04 11:47:46 +00:00
juliango2100
d14ca15b78
Update README.md
2019-02-28 09:13:22 -08:00
zhzhao8888
7bf3b4580a
Add files via upload
2019-02-27 16:41:48 -08:00
zhzhao8888
78d2313a99
Add files via upload
2019-02-27 16:41:22 -08:00
Ian Hellen
50d6b4b645
Removed msticpy tools
2019-02-27 14:18:59 -08:00
Ian Hellen
4cee5d2cdb
Stripping VT key from the example notebook
2019-02-27 13:06:21 -08:00
Ian Hellen
6b62310aef
Merge remote-tracking branch 'origin/master' into Notebook_fixes_#3
...
# Conflicts:
# Notebooks/Get Started.ipynb
2019-02-27 12:49:34 -08:00
Ian Hellen
9b9ec17cef
Notebook fixes + Sample notebooks with data + vis
2019-02-27 11:49:17 -08:00
Zhipeng Zhao
620be5b4ce
Change it back
2019-02-26 17:51:42 -08:00
zhzhao8888
6b114c2aff
Add files via upload
2019-02-26 13:38:33 -08:00
Julian Gonzalez
37579ee321
Name changes for notebooks
2019-02-25 15:48:22 -08:00
Ian Hellen
35e4b217ff
Updated notebooks with GeoIP warning.
...
Also added instruction to restart the kernel if they install new versions of libraries
Also added Azure Notebooks - Configure Python Version notebook.
2019-02-25 12:54:31 -08:00
Ian Hellen
7cfe82efd1
O365Explorer and WindowsHostExplorer notebooks
...
Fixes for Alert Investigation - Process Alerts notebook.
Minor updates to Demo notebook.
Also added requirements.txt for configuring AzureNotebooks projects.
2019-02-24 20:47:44 -08:00
Zhipeng Zhao
076986d2ed
Title font
2019-02-22 12:48:47 -08:00
zhzhao8888
bfb9d3a6bd
Add files via upload
2019-02-22 12:47:56 -08:00
Zhipeng Zhao
83675bdcd8
Adding help.md
2019-02-22 11:27:39 -08:00
Ian Hellen
0d3cda83bd
Additional notebook fixes
...
Added demo notebook - Demo - Linux-Windows-Office Investigation.ipynb
2019-02-21 22:18:19 -08:00
Ian Hellen
7002aad3bd
Undeleted critical line from both notebooks!
2019-02-20 20:50:59 -08:00