We’ve just released v2.0.0 of MSTICPy — the Python InfoSec library for Jupyter notebooks. This is a major version update and has: A number new features Some significant updates/improvements to existing features New and improved documentation on our ReadTheDocs documentation site Some breaking changes and deprecations. To give you a…

In our recent hack month, the most popular type of contribution was a data provider. We’ve never really documented how to create one of these, so we thought that it would be a good idea to do that now and (hopefully) avoid too much future head-scratching and pouring over existing…

In recent weeks we have released MSTICPy 1.6 & 1.7 containing a range of features contributed during the MSTICPy January Hackathon. In this blog we are going to cover the features added in these releases including: · Expanded Microsoft Sentinel features, including integration with new APIs · Layering and subgrouping…

The 1.5.0 release of MSTICPy includes several major features & updates: · A new visualization for graphing the relationship between entities in an investigation. · Integration with RiskIQ as a Threat Intelligence provider. · Updated support of Microsoft Defender as a query provider. · Preview support for querying Azure Data…

The 1.4.2 release of MSTICPy includes several major features/updates: Support for Azure sovereign clouds for Azure Sentinel, Key Vault, Azure APIs, Azure Resource Graph and Azure Sentinel APIs A new visualization — the Matrix plot visualizing interactions between two sets of data items. Significant update to the Process Tree visualization…

This release includes 3 new notebooklets: AccountSummary, IPAddressSummary and LogonSessionRarity. It’s been a while since we updated any notebooklets but then three come along at once! For some background read the original announcement of notebooklets. This release also integrates the notebooklets with MSTICPy’s pivot functions, so that you can call…

(We skipped a 1.2.0 with a few last-minute fixes) This release contains some interesting new features, two of which were contributed by community members Ryan Cobb and Julien Touche. These features are: two new data providers for Azure Resource Graph and Sumologic, and a DataViewer control for pandas dataframes. Azure Resource Graph provider The…

We recently released an update to MSTICPy that adds some cool new features as well as some minor fixes. Warning — this release includes some potentially breaking changes since we have renamed several pivot functions to have shorter, friendlier names. Several Azure Sentinel query functions have shortened names. Pivot improvements …

MSTICPy has been around for nearly 2 and half years so we decided that it was time to bring it out of beta and let it roam free in the big wide world. (This article is based on the earlier MSTICPy release candidate article but does contain some updates, so…