Get item with aliasing.

Return results of httpx.get.

Context manager to temporarily set MSTICPYCONFIG path. Parameters ---------- mp_path : str | Path Path to msticpy config yam

Get path to testdata folder.

Return Python representation of json data.

Return timeout from settings or overridden in `kwargs`.

Return the current progress maximum value. Returns ------- int Max value

Return setting value at `path`.

Return dict value or default.

Return setting item for path. Parameters ---------- setting_path : str Path to setting item expressed as dot-separated

Return key value or default.

Test method.

Set an item in driver properties.

Output to IPython display or print.

Return a Kusto config dictionary.

Return authorization header with current token. Parameters ---------- token : str Azure auth token. Returns -------

Return headers dict for MSTICPy User Agent.

Check that Sentinel workspace is connected.

Return decoded token.

Read Provider settings from package config. Parameters ---------- config_section : str, optional [description], by default "

Print out debug info.

Set the status text.

Display the HTML text.

Check connection state and raise error if not connected. Parameters ---------- provider_name : str, optional

Connect to data source. Parameters ---------- connection_str : str Connection string for the data source

Run the pipeline on the supplied DataFrame. Parameters ---------- data : pd.DataFrame Input DataFrame fo

Return query with values from kwargs and defaults substituted. Parameters ---------- formatters : dict[str, Callable

Run individual tests.

Add an edge between self and target. Parameters ---------- target : Node Target node. edge_attrs

Unsupported type for environment.

Return results of a VT search query as a DataFrame. Parameters ---------- query : str Virus Total Intell

Check Ioc Type and cleans up ioc. Parameters ---------- ioc : str IoC ioc_type : str, optional

Check all kwargs names against a list. Parameters ---------- supplied_args : dict[str, Any] Arguments to check legal_arg

Get an authneticaiton token.

Merge with other entity to create new entity. Returns ------- Entity Merged entity. Raises

Filter all columns of DataFrame, return rows with any matches. Parameters ---------- expr : Union[str, Number]

Test method.

Add an IoC type and regular expression to use to the built-in set. Parameters ---------- ioc_type : str

Close an open GeoIP DB.

Return the setting definition at `path`.

Button on_click handler.

Return True if running in IPython environment. Parameters ---------- notebook : bool, optional If notebook is true this will

Return True if negative response. Parameters ---------- response : Dict The returned data response

Extract IoCs from either a string or pandas DataFrame. Parameters ---------- src : str, optional source

Return lists of core resources from APIs. Parameters ---------- item_type : str The type of resource you

Connect to Azure SDK/API. Parameters ---------- auth_methods : List[str], optional List of authentication methods to try

Return the control stored at `path`.

Return list of family.query in the store. Parameters ---------- substring : Optional[str] Optional patte

Return parsed IoCType of string. Parameters ---------- value : str Enumeration name Returns

Adjust type and format to suit target widget. Parameters ---------- value : Any The value to process ctrl : Optional[wid

Return dataframe with KQL timespan columns converted to timedelta64[ns]. This function converts string columns containing KQL timespan value

Build request data body from items. Parameters ---------- items : dict A set pf items to be formated in the request body.

Return True if node has an edge with `other`.

Lookup a single IoC observable.

Train the model by computing counts and probabilities. In particular, computes the counts and probabilities of the commands

Return a dictionary with layout and style for a text widget. Parameters ---------- width : str, optional The width of the wi

Validate settings against definitions for a specific path. Parameters ---------- path : str The setting

Parse VirusTotal results based on IoCType. :param vt_results: Raw results from VT :param observable: The observable

Return dataframe with converted TZ-aware timestamps. Parameters ---------- data : pd.DataFrame Input dataframe columns :

Return entity collection for a give entity type. Parameters ---------- entity_type : str, optional The e

Return query with name `data_family` and `query_name`. Parameters ---------- query_name: str Name of the

Retrieve a secret from the keyring. Parameters ---------- secret_name : str Secret name. Return

Display a string as Markdown with optional style. Parameters ---------- string : str The string to display styles : Unio

Wrap bokeh 'figure' function for version-agnostic param naming. Parameters ---------- func : Callable The function to wrap

Build process trees from the process events. Parameters ---------- schema : Union[ProcSchema, Dict[str, Any]], optio

Authenticate with the SDK & API. Parameters ---------- auth_methods : List, optional list of preferred a

Connect to Splunk via splunk-sdk. Parameters ---------- connection_str : Optional[str], optional Connect

Connect to data source. Either a connection string or a cluster name must be specified. The cluster name can be a short name

Display the interactive widgets.

Load user session configuration. Parameters ---------- session_file : str, Path, optional Path to the user configuration fil

Print args to std_out (Debug version).

Execute splunk query and retrieve results via OneShot or async search mode. Parameters ---------- query : str

Convert cell text to pandas DataFrame.

Set setting value at path to `value`.

Sort output by column expression. Parameters ---------- cols : Union[str, Iterable[str], Dict[str, str]]

Return an item at the path from `member_dict`.

Create client with v1 authentication token. Parameters ---------- client_name : str The name of the clie

Return parsed expression.

Check if there are unsaved changes.

Authenticate to the Azure SDK. Parameters ---------- auth_methods : List, optional list of preferred aut

Context manager to temporarily set MSTICPYCONFIG path. Parameters ---------- monkeypatch : Any Pytest monkeypatch fixture

Generate item pairs from different input types. Parameters ---------- data : Any DataFrame, dictionary or iterable item_

Get http timeout from settings or kwargs.

Return no-border widget layout.

Save the values in the control at `path` to settings.

Validate that an archive member path does not escape dest_dir. Checks for absolute paths, parent directory references, and resolved path

Create an instance of the MsticpyUserError class. Parameters ---------- args : Iterable of strings Args

Check Observable Type and cleans up observable. Parameters ---------- obs : str Observable obs_t

Carry out periodogram polling detecton on an array of timestamps. Carries out the the procedure outlined in [1] to detect if the arr

Output to IPython display or print - always output regardless of verbosity.

Return comparable package version. Parameters ---------- version : str | tuple Version string or tuple Returns ----

Open a new query collection.

Print a status message depending on the current level of verbosity. Parameters ---------- message : str

Return border widget layout.

Connect to OpenObserve via python-openobserve. Parameters ---------- connection_str : str | None OpenObs