Skip to content

Commit

Permalink
Merge remote-tracking branch 'origin/master' into ianhelle/get_starte…
Browse files Browse the repository at this point in the history
…d_nbs_2-2021-07-14
  • Loading branch information
ianhelle committed Jul 22, 2021
2 parents f406210 + 4df8640 commit a98f306
Show file tree
Hide file tree
Showing 22 changed files with 5,391 additions and 3,502 deletions.
41 changes: 19 additions & 22 deletions A Getting Started Guide For Azure Sentinel Notebooks.ipynb
Original file line number Diff line number Diff line change
Expand Up @@ -4,28 +4,25 @@
"cell_type": "markdown",
"metadata": {},
"source": [
"# Getting Started with Azure Notebooks and Azure Sentinel\n",
"**Notebook Version:** 1.0<br>\n",
" **Python Version:** Python 3.6 (including Python 3.6 - AzureML)<br>\n",
" **Required Packages**: <br>\n",
" **Platforms Supported**:\n",
" - Azure Notebooks Free Compute\n",
" - Azure Notebooks DSVM\n",
" - OS Independent\n",
"\n",
"**Data Sources Required**:\n",
" - Log Analytics - SiginLogs (Optional)\n",
" - VirusTotal\n",
" - MaxMind\n",
" \n",
" \n",
"This notebook takes you through the basics needed to get started with Azure Notebooks and Azure Sentinel, and how to perform the basic actions of data acquisition, data enrichment, data analysis, and data visualization. These actions are the building blocks of threat hunting with notebooks and are useful to understand before running more complex notebooks. This notebook only lightly covers each topic but includes 'learn more' sections to provide you with the resource to deep dive into each of these topics. \n",
"\n",
"This notebook assumes that you are running this in an Azure Notebooks environment, however it will work in other Jupyter environments.\n",
"\n",
"**Note:**\n",
"This notebooks uses SigninLogs from your Azure Sentinel Workspace. If you are not yet collecting SigninLogs configure this connector in the Azure Sentinel portal before running this notebook.\n",
"This notebook also uses the VirusTotal API for data enrichment, for this you will require an API key which can be obtained by signing up for a free [VirusTotal community account](https://www.virustotal.com/gui/join-us)\n"
"# Getting Started with Azure Notebooks and Azure Sentinel\r\n",
"**Notebook Version:** 1.0<br>\r\n",
" **Python Version:** Python 3.6 (including Python 3.6 - AzureML)<br>\r\n",
" **Required Packages**: \r\n",
" - MSTICPy\r\n",
"\r\n",
"**Data Sources Required**:\r\n",
" - Log Analytics - SiginLogs (Optional)\r\n",
" - VirusTotal\r\n",
" - MaxMind\r\n",
" \r\n",
" \r\n",
"This notebook takes you through the basics needed to get started with Azure Notebooks and Azure Sentinel, and how to perform the basic actions of data acquisition, data enrichment, data analysis, and data visualization. These actions are the building blocks of threat hunting with notebooks and are useful to understand before running more complex notebooks. This notebook only lightly covers each topic but includes 'learn more' sections to provide you with the resource to deep dive into each of these topics. \r\n",
"\r\n",
"This notebook assumes that you are running this in an Azure Notebooks environment, however it will work in other Jupyter environments.\r\n",
"\r\n",
"**Note:**\r\n",
"This notebooks uses SigninLogs from your Azure Sentinel Workspace. If you are not yet collecting SigninLogs configure this connector in the Azure Sentinel portal before running this notebook.\r\n",
"This notebook also uses the VirusTotal API for data enrichment, for this you will require an API key which can be obtained by signing up for a free [VirusTotal community account](https://www.virustotal.com/gui/join-us)\r\n"
]
},
{
Expand Down
2 changes: 1 addition & 1 deletion A Getting Started Guide For CSharp AML Notebooks.ipynb

Large diffs are not rendered by default.

Loading

0 comments on commit a98f306

Please sign in to comment.