DataProviders, QueryEditor, CrowdSec and AbuseIPDB TIProviders
Pre-release
Pre-release
Preview release of 2.7.0
More detailed release notes in the full release.
Main Changes
Two new TI Providers:
- CrowdSec (thanks to @sbs2001)
- AbuseIPDB (thanks to @rrevuelta)
Updated Data providers for Sentinel/Azure Monitor/Log Analytics and Kusto/Azure Data Explorer
These were introduced in v2.5.0 but are now the default drivers for these providers.
Query Editor
ipywidgets based query template editor - this is somewhat provisional so please be sure to test and
report bugs.
Updates to Authentication - esp for the AzureData and MicrosoftSentinel API modules
- You can now authenticate by supplying an AzureCredential as a
credential
parameter - The connect methods for these support
cloud
parameter to specify different sovreign clouds - The init and connect methods are instrumented with logging to help debug issues:
import msticpy as mp
from msticpy.context.azure.sentinel_core import MicrosoftSentinel
mp.set_logging_level("INFO")
mssentinel = MicrosoftSentinel()
mssentinel.connect()
Other items
- MS Sentinel delete watchlist API added by @mbabinski
- Splunk fixes added by @Tatsuya-hasegawa
What's Changed
- Add CrowdSec TIProvider by @sbs2001 in #673
- Added delete_watchlist_item method by @mbabinski in #682
- Update pandas requirement from <2.0.0,>=1.4.0 to >=1.4.0,<3.0.0 by @dependabot in #653
- Bump sphinx from 6.1.3 to 7.1.0 by @dependabot in #686
- Add AbuseIPDB TIProvider by @rrevuelta in #687
- Typo corrections in queries by @ianhelle in #684
- Ianhelle/query editor 2023 04 21 by @ianhelle in #685
- Few fix splunk driver by @Tatsuya-hasegawa in #688
- Ianhelle/mssentinel auth 2023 08 01 by @ianhelle in #690
- Updating timeline docs to prioritize pd accessors by @ianhelle in #691
- Fix splunk uploader create index option by @Tatsuya-hasegawa in #692
- v2.7.0 - changing new kql/sentinel drivers to be defaults by @ianhelle in #696
New Contributors
- @sbs2001 made their first contribution in #673
- @mbabinski made their first contribution in #682
Full Changelog: v2.6.0...v2.7.0.pre1