LICENSE
MANIFEST.in
NOTICE.txt
README.md
pyproject.toml
requirements-all.txt
requirements-dev.txt
requirements.txt
setup.cfg
setup.py
msticpy/__init__.py
msticpy/_version.py
msticpy/lazy_importer.py
msticpy/msticpyconfig.yaml
msticpy.egg-info/PKG-INFO
msticpy.egg-info/SOURCES.txt
msticpy.egg-info/dependency_links.txt
msticpy.egg-info/not-zip-safe
msticpy.egg-info/requires.txt
msticpy.egg-info/top_level.txt
msticpy/aiagents/__init__.py
msticpy/aiagents/config_utils.py
msticpy/aiagents/mp_docs_rag_magic.py
msticpy/aiagents/rag_agents.py
msticpy/analysis/__init__.py
msticpy/analysis/cluster_auditd.py
msticpy/analysis/code_cleanup.py
msticpy/analysis/eventcluster.py
msticpy/analysis/observationlist.py
msticpy/analysis/outliers.py
msticpy/analysis/polling_detection.py
msticpy/analysis/syslog_utils.py
msticpy/analysis/timeseries.py
msticpy/analysis/anomalous_sequence/__init__.py
msticpy/analysis/anomalous_sequence/anomalous.py
msticpy/analysis/anomalous_sequence/model.py
msticpy/analysis/anomalous_sequence/sessionize.py
msticpy/analysis/anomalous_sequence/utils/__init__.py
msticpy/analysis/anomalous_sequence/utils/cmds_only.py
msticpy/analysis/anomalous_sequence/utils/cmds_params_only.py
msticpy/analysis/anomalous_sequence/utils/cmds_params_values.py
msticpy/analysis/anomalous_sequence/utils/data_structures.py
msticpy/analysis/anomalous_sequence/utils/laplace_smooth.py
msticpy/analysis/anomalous_sequence/utils/probabilities.py
msticpy/auth/__init__.py
msticpy/auth/azure_auth.py
msticpy/auth/azure_auth_core.py
msticpy/auth/cloud_mappings.py
msticpy/auth/cloud_mappings_offline.py
msticpy/auth/cred_wrapper.py
msticpy/auth/keyring_client.py
msticpy/auth/keyvault_client.py
msticpy/auth/keyvault_settings.py
msticpy/auth/msal_auth.py
msticpy/auth/secret_settings.py
msticpy/common/__init__.py
msticpy/common/azure_auth.py
msticpy/common/check_version.py
msticpy/common/data_types.py
msticpy/common/data_utils.py
msticpy/common/exceptions.py
msticpy/common/pkg_config.py
msticpy/common/provider_settings.py
msticpy/common/proxy_settings.py
msticpy/common/settings.py
msticpy/common/timespan.py
msticpy/common/wsconfig.py
msticpy/common/utility/__init__.py
msticpy/common/utility/format.py
msticpy/common/utility/ipython.py
msticpy/common/utility/package.py
msticpy/common/utility/types.py
msticpy/config/__init__.py
msticpy/config/ce_azure.py
msticpy/config/ce_azure_sentinel.py
msticpy/config/ce_common.py
msticpy/config/ce_data_providers.py
msticpy/config/ce_keyvault.py
msticpy/config/ce_msticpy.py
msticpy/config/ce_other_providers.py
msticpy/config/ce_provider_base.py
msticpy/config/ce_simple_settings.py
msticpy/config/ce_ti_providers.py
msticpy/config/ce_user_defaults.py
msticpy/config/comp_edit.py
msticpy/config/compound_ctrls.py
msticpy/config/file_browser.py
msticpy/config/mp_config_control.py
msticpy/config/mp_config_edit.py
msticpy/config/mp_config_file.py
msticpy/config/query_editor.py
msticpy/context/__init__.py
msticpy/context/contextlookup.py
msticpy/context/domain_utils.py
msticpy/context/geoip.py
msticpy/context/http_provider.py
msticpy/context/ip_utils.py
msticpy/context/lookup.py
msticpy/context/lookup_result.py
msticpy/context/preprocess_observable.py
msticpy/context/provider_base.py
msticpy/context/tilookup.py
msticpy/context/azure/__init__.py
msticpy/context/azure/azure_data.py
msticpy/context/azure/sentinel_analytics.py
msticpy/context/azure/sentinel_bookmarks.py
msticpy/context/azure/sentinel_core.py
msticpy/context/azure/sentinel_dynamic_summary.py
msticpy/context/azure/sentinel_dynamic_summary_types.py
msticpy/context/azure/sentinel_incidents.py
msticpy/context/azure/sentinel_search.py
msticpy/context/azure/sentinel_ti.py
msticpy/context/azure/sentinel_utils.py
msticpy/context/azure/sentinel_watchlists.py
msticpy/context/azure/sentinel_workspaces.py
msticpy/context/contextproviders/__init__.py
msticpy/context/contextproviders/context_provider_base.py
msticpy/context/contextproviders/http_context_provider.py
msticpy/context/contextproviders/servicenow.py
msticpy/context/tiproviders/__init__.py
msticpy/context/tiproviders/abuseipdb.py
msticpy/context/tiproviders/alienvault_otx.py
msticpy/context/tiproviders/azure_sent_byoti.py
msticpy/context/tiproviders/binaryedge.py
msticpy/context/tiproviders/crowdsec.py
msticpy/context/tiproviders/cyberint.py
msticpy/context/tiproviders/greynoise.py
msticpy/context/tiproviders/ibm_xforce.py
msticpy/context/tiproviders/intsights.py
msticpy/context/tiproviders/ip_quality_score.py
msticpy/context/tiproviders/kql_base.py
msticpy/context/tiproviders/mblookup.py
msticpy/context/tiproviders/open_page_rank.py
msticpy/context/tiproviders/pulsedive.py
msticpy/context/tiproviders/result_severity.py
msticpy/context/tiproviders/riskiq.py
msticpy/context/tiproviders/ti_http_provider.py
msticpy/context/tiproviders/ti_provider_base.py
msticpy/context/tiproviders/tor_exit_nodes.py
msticpy/context/tiproviders/virustotal.py
msticpy/context/vtlookupv3/__init__.py
msticpy/context/vtlookupv3/vtfile_behavior.py
msticpy/context/vtlookupv3/vtlookup.py
msticpy/context/vtlookupv3/vtlookupv3.py
msticpy/data/__init__.py
msticpy/data/azure_blob_storage.py
msticpy/data/azure_data.py
msticpy/data/azure_sentinel.py
msticpy/data/data_obfus.py
msticpy/data/data_providers.py
msticpy/data/query_container.py
msticpy/data/query_defns.py
msticpy/data/sql_to_kql.py
msticpy/data/azure/__init__.py
msticpy/data/azure/azure_blob_storage.py
msticpy/data/azure/azure_data.py
msticpy/data/core/__init__.py
msticpy/data/core/data_providers.py
msticpy/data/core/data_query_reader.py
msticpy/data/core/param_extractor.py
msticpy/data/core/query_container.py
msticpy/data/core/query_defns.py
msticpy/data/core/query_provider_connections_mixin.py
msticpy/data/core/query_provider_utils_mixin.py
msticpy/data/core/query_source.py
msticpy/data/core/query_store.py
msticpy/data/core/query_template.py
msticpy/data/drivers/__init__.py
msticpy/data/drivers/azure_kusto_driver.py
msticpy/data/drivers/azure_monitor_driver.py
msticpy/data/drivers/azure_search_driver.py
msticpy/data/drivers/cybereason_driver.py
msticpy/data/drivers/driver_base.py
msticpy/data/drivers/elastic_driver.py
msticpy/data/drivers/kql_driver.py
msticpy/data/drivers/kusto_driver.py
msticpy/data/drivers/local_data_driver.py
msticpy/data/drivers/local_osquery_driver.py
msticpy/data/drivers/local_velociraptor_driver.py
msticpy/data/drivers/mdatp_driver.py
msticpy/data/drivers/mordor_driver.py
msticpy/data/drivers/odata_driver.py
msticpy/data/drivers/prismacloud_driver.py
msticpy/data/drivers/resource_graph_driver.py
msticpy/data/drivers/security_graph_driver.py
msticpy/data/drivers/sentinel_query_reader.py
msticpy/data/drivers/splunk_driver.py
msticpy/data/drivers/sumologic_driver.py
msticpy/data/queries/cybereason/cybereason_connections.yaml
msticpy/data/queries/cybereason/cybereason_hosts.yaml
msticpy/data/queries/cybereason/cybereason_processes.yaml
msticpy/data/queries/localdata/local_data.yaml
msticpy/data/queries/m365d/kql_m365_alerts.yaml
msticpy/data/queries/m365d/kql_m365_file.yaml
msticpy/data/queries/m365d/kql_m365_hunting.yaml
msticpy/data/queries/m365d/kql_m365_identity.yaml
msticpy/data/queries/m365d/kql_m365_network.yaml
msticpy/data/queries/m365d/kql_m365_process.yaml
msticpy/data/queries/m365d/kql_m365_user.yaml
msticpy/data/queries/mde/kql_mdatp_alerts.yaml
msticpy/data/queries/mde/kql_mdatp_file.yaml
msticpy/data/queries/mde/kql_mdatp_hunting.yaml
msticpy/data/queries/mde/kql_mdatp_network.yaml
msticpy/data/queries/mde/kql_mdatp_process.yaml
msticpy/data/queries/mde/kql_mdatp_user.yaml
msticpy/data/queries/msgraph/graph_alerts.yaml
msticpy/data/queries/mssentinel/kql_sent_alert.yaml
msticpy/data/queries/mssentinel/kql_sent_az_dns.yaml
msticpy/data/queries/mssentinel/kql_sent_az_network.yaml
msticpy/data/queries/mssentinel/kql_sent_azure.yaml
msticpy/data/queries/mssentinel/kql_sent_azuresentinel.yaml
msticpy/data/queries/mssentinel/kql_sent_heartbeat_info.yaml
msticpy/data/queries/mssentinel/kql_sent_lxauditd.yaml
msticpy/data/queries/mssentinel/kql_sent_lxsyslog_activity.yaml
msticpy/data/queries/mssentinel/kql_sent_lxsyslog_apps.yaml
msticpy/data/queries/mssentinel/kql_sent_lxsyslog_logon.yaml
msticpy/data/queries/mssentinel/kql_sent_lxsyslog_sysmon.yaml
msticpy/data/queries/mssentinel/kql_sent_net.yaml
msticpy/data/queries/mssentinel/kql_sent_o365.yaml
msticpy/data/queries/mssentinel/kql_sent_threatintel.yaml
msticpy/data/queries/mssentinel/kql_sent_timeseries.yaml
msticpy/data/queries/mssentinel/kql_sent_winevent.yaml
msticpy/data/queries/mssentinel/kql_sent_winevent_logon.yaml
msticpy/data/queries/mssentinel/kql_sent_winevent_proc.yaml
msticpy/data/queries/prismacloud/rql_asset_search.yaml
msticpy/data/queries/prismacloud/rql_config_resource_keyvault.yaml
msticpy/data/queries/prismacloud/rql_event_search.yaml
msticpy/data/queries/resourcegraph/resource_graph_queries.yaml
msticpy/data/queries/resourcegraph/sentinel_resources.yaml
msticpy/data/queries/splunk/splunk_alert_queries.yaml
msticpy/data/queries/splunk/splunk_authentication_queries.yaml
msticpy/data/queries/splunk/splunk_queries.yaml
msticpy/data/queries/sumologic/sumologic_queries.yaml
msticpy/data/storage/__init__.py
msticpy/data/storage/azure_blob_storage.py
msticpy/data/uploaders/__init__.py
msticpy/data/uploaders/loganalytics_uploader.py
msticpy/data/uploaders/splunk_uploader.py
msticpy/data/uploaders/uploader_base.py
msticpy/datamodel/__init__.py
msticpy/datamodel/pivot.py
msticpy/datamodel/entities/__init__.py
msticpy/datamodel/entities/account.py
msticpy/datamodel/entities/alert.py
msticpy/datamodel/entities/azure_resource.py
msticpy/datamodel/entities/cloud_application.py
msticpy/datamodel/entities/cloud_logon_session.py
msticpy/datamodel/entities/dns.py
msticpy/datamodel/entities/entity.py
msticpy/datamodel/entities/entity_enums.py
msticpy/datamodel/entities/entity_graph.py
msticpy/datamodel/entities/file.py
msticpy/datamodel/entities/file_hash.py
msticpy/datamodel/entities/geo_location.py
msticpy/datamodel/entities/graph_property.py
msticpy/datamodel/entities/host.py
msticpy/datamodel/entities/host_logon_session.py
msticpy/datamodel/entities/iot_device.py
msticpy/datamodel/entities/ip_address.py
msticpy/datamodel/entities/mail_cluster.py
msticpy/datamodel/entities/mail_message.py
msticpy/datamodel/entities/mailbox.py
msticpy/datamodel/entities/mailbox_configuration.py
msticpy/datamodel/entities/malware.py
msticpy/datamodel/entities/network_connection.py
msticpy/datamodel/entities/oauth_application.py
msticpy/datamodel/entities/process.py
msticpy/datamodel/entities/registry_key.py
msticpy/datamodel/entities/registry_value.py
msticpy/datamodel/entities/security_group.py
msticpy/datamodel/entities/service_principal.py
msticpy/datamodel/entities/submission_mail.py
msticpy/datamodel/entities/threat_intelligence.py
msticpy/datamodel/entities/unknown_entity.py
msticpy/datamodel/entities/url.py
msticpy/datamodel/soc/__init__.py
msticpy/datamodel/soc/incident.py
msticpy/datamodel/soc/sentinel_alert.py
msticpy/init/__init__.py
msticpy/init/azure_ml_tools.py
msticpy/init/azure_synapse_tools.py
msticpy/init/logging.py
msticpy/init/mp_pandas_accessors.py
msticpy/init/mp_plugins.py
msticpy/init/mp_user_session.py
msticpy/init/nbinit.py
msticpy/init/nbmagics.py
msticpy/init/pivot.py
msticpy/init/user_config.py
msticpy/init/pivot_core/__init__.py
msticpy/init/pivot_core/pivot_browser.py
msticpy/init/pivot_core/pivot_container.py
msticpy/init/pivot_core/pivot_magic_core.py
msticpy/init/pivot_core/pivot_pd_accessor.py
msticpy/init/pivot_core/pivot_pipeline.py
msticpy/init/pivot_core/pivot_register.py
msticpy/init/pivot_core/pivot_register_reader.py
msticpy/init/pivot_init/__init__.py
msticpy/init/pivot_init/pivot_data_queries.py
msticpy/init/pivot_init/pivot_ti_provider.py
msticpy/init/pivot_init/vt_pivot.py
msticpy/nbtools/__init__.py
msticpy/nbtools/data_viewer.py
msticpy/nbtools/entityschema.py
msticpy/nbtools/foliummap.py
msticpy/nbtools/morph_charts.py
msticpy/nbtools/nbdisplay.py
msticpy/nbtools/nbwidgets.py
msticpy/nbtools/observationlist.py
msticpy/nbtools/process_tree.py
msticpy/nbtools/security_alert.py
msticpy/nbtools/security_alert_graph.py
msticpy/nbtools/security_base.py
msticpy/nbtools/security_event.py
msticpy/nbtools/ti_browser.py
msticpy/nbtools/timeline.py
msticpy/nbtools/timeline_duration.py
msticpy/nbtools/timeline_pd_accessor.py
msticpy/nbtools/timeseries.py
msticpy/nbtools/utility.py
msticpy/nbtools/wsconfig.py
msticpy/nbwidgets/__init__.py
msticpy/nbwidgets/core.py
msticpy/nbwidgets/get_environment_key.py
msticpy/nbwidgets/get_text.py
msticpy/nbwidgets/lookback.py
msticpy/nbwidgets/option_buttons.py
msticpy/nbwidgets/progress.py
msticpy/nbwidgets/query_time.py
msticpy/nbwidgets/select_alert.py
msticpy/nbwidgets/select_item.py
msticpy/nbwidgets/select_subset.py
msticpy/resources/WinSecurityEvent.json
msticpy/resources/cmd_line_rules.json
msticpy/resources/mp_pivot_reg.yaml
msticpy/resources/mpconfig_defaults.yaml
msticpy/resources/obfuscation_cols.yaml
msticpy/sectools/__init__.py
msticpy/sectools/auditdextract.py
msticpy/sectools/base64unpack.py
msticpy/sectools/cmd_line.py
msticpy/sectools/domain_utils.py
msticpy/sectools/eventcluster.py
msticpy/sectools/geoip.py
msticpy/sectools/iocextract.py
msticpy/sectools/ip_utils.py
msticpy/sectools/proc_tree_build_mde.py
msticpy/sectools/proc_tree_build_winlx.py
msticpy/sectools/proc_tree_builder.py
msticpy/sectools/proc_tree_schema.py
msticpy/sectools/proc_tree_utils.py
msticpy/sectools/sectools_magics.py
msticpy/sectools/syslog_utils.py
msticpy/sectools/tilookup.py
msticpy/sectools/vtlookup.py
msticpy/sectools/tiproviders/__init__.py
msticpy/sectools/tiproviders/ti_provider_base.py
msticpy/sectools/vtlookupv3/__init__.py
msticpy/sectools/vtlookupv3/vtfile_behavior.py
msticpy/sectools/vtlookupv3/vtlookupv3.py
msticpy/sectools/vtlookupv3/vtobject_browser.py
msticpy/transform/__init__.py
msticpy/transform/auditdextract.py
msticpy/transform/base64unpack.py
msticpy/transform/cmd_line.py
msticpy/transform/iocextract.py
msticpy/transform/network.py
msticpy/transform/proc_tree_build_mde.py
msticpy/transform/proc_tree_build_winlx.py
msticpy/transform/proc_tree_builder.py
msticpy/transform/proc_tree_schema.py
msticpy/transform/process_tree_utils.py
msticpy/vis/__init__.py
msticpy/vis/code_view.py
msticpy/vis/data_viewer.py
msticpy/vis/data_viewer_panel.py
msticpy/vis/entity_graph_tools.py
msticpy/vis/figure_dimension.py
msticpy/vis/foliummap.py
msticpy/vis/matrix_plot.py
msticpy/vis/mordor_browser.py
msticpy/vis/morph_charts.py
msticpy/vis/mp_pandas_plot.py
msticpy/vis/nbdisplay.py
msticpy/vis/network_plot.py
msticpy/vis/process_tree.py
msticpy/vis/query_browser.py
msticpy/vis/ti_browser.py
msticpy/vis/timeline.py
msticpy/vis/timeline_common.py
msticpy/vis/timeline_duration.py
msticpy/vis/timeline_pd_accessor.py
msticpy/vis/timeline_values.py
msticpy/vis/timeseries.py
msticpy/vis/vtobject_browser.py