Return separate queries for split time ranges.

Return dictionary of partials to execute queries.

Aggregate ti results on IoC for multiple providers.

Return vertical range too for plot.

Create the metadata section of the YAML for the current query. Parameters ---------- cur_query : SentinelQuery The current S

Query Cymru for ASN information.

Decode string and return displayable content plus list of decoded artifacts.

Examine input string for known binaries and decode and unpack.

Deduplicate incident and alert entities.

Return list of of columns hidden by default.

Mock _df_status.

Display text-only version of the exception text.

Handle event from folder text box when pressing ENTER.

Compute entropy of input string.

Return results of query run query against additional connections. Parameters ---------- query : str The

Execute an async search and return results.

Return results of paginated queries. Parameters ---------- body : dict[str, Any] The body of the query t

Execute `func` for DataFrame inputs.

Execute `func` for value (scalar or iterable) inputs.

Execute a query that is split into multiple queries. Parameters ---------- split_by : str The time inter

Return list of coordinate tuples from GeoLocation entities.

Assemble discrete messages sharing the same message Id into a single event. Parameters ---------- message_dict : Mapping[str, Any]

Extract tidied DF from all queries.

Find any inferred parents and creates rows for them.

Return grandparent processes for any procs not in Createdprocesses.

Return parent processes that are not in the created process set.

Convert processes_tree attribute to SIProcessObjects.

Convert list of dictionaries from search() function to DataFrame. Parameters ---------- response_list : list

Extract source entity properties. Parameters ---------- src_entity : Mapping[str, Any] The source mappab

Extract the category names matching `pattern`.

Recursively extracts column values from the given key's values. Parameters ---------- data: Union[dict, list, str] Values fo

Extract from zip and parse json file to DataFrame. Parameters ---------- zip_file : ZipFile ZipFile object containing the fi

Create closure for ASN fetching.

Fetch list of linked services via Azure Synapse API.

Return full metadata for Mordor datasets. Parameters ---------- cache_folder : Optional[str] Folder to search for mordor cac

Return required value for potential secret setting. Parameters ---------- setting_path : str Dotted path to the setting

Filter out credential error messages.

Rewrite out credential not found message.

Return filter for `in` and `between` operators.

Find an orgs address from an RDAP entity.

Try to fix common issues with Resource ID string.

Flatten "elementValues from Cybereason result to a format that can be handled by pandas. Parameters ---------- eleme

Flatten "simpleValues from Cybereason result to a format that can be handled by pandas. Parameters ---------- simple

Format a query string. Parameters ---------- query : str The query string. Returns ----

Format the Mitre Attack data for display.

Format the Mordor files data for display.

Return formatted list parameter.

Format the Mordor notebooks data for display.

Format query for display.

Format query docstring as HTML.

Return datetime from a timestamp in milliseconds. Returns ------- dt.datetime|int

Apply format function to column cell.

Generate random expression name.

Generate a list of all enties form a set of nested entities.

Return random domain name helper function.

Return first parameter with a matching alias.

Return global values if found.

Get the GUID of an analytic rule. Parameters ---------- analytic : str The GUID or name of the analytic

Return a dict whether the value is a str or a dict.

Retrieve authentication methods from settings.

Get authentication parameters for cluster from KustoConfig values.

Return cluster details from query source.

Return value from setting_path.

Check and consolidate connection parameters.

Check and consolidate connection parameters.

Check and consolidate connection parameters.

Return full cluster URI and credential for cluster name or URI.

Recursively save values in the control at `path` to settings.