Group the data and calculate start and end times.

Closure for replace_guid. Returns ------- Callable[[str], str] replace_guid function

Hooks the `func` and bypasses it if exception is MsticpyUserException.

Import packages from default set or supplied as parameters.

Infer reasonable time unit from current timespan.

Initialize the data field controls.

Initialize the filter controls.

Initialize the select dataset control.

Return true if the object has least 2 usable properties.

Call `target_func` function with values of each row in `input_df`.

Add label from the Provider column to the details.

Laplace smooth all the counts for the model. We do this by adding 1 to all the counts. This is so we shift some of the proba

Return the most recently created instance of type in namespace.

Load any modules in pivot_init sub-package.

Load specified Index or create if it doesn't exist.

Load and Initialize non-query components. Parameters ---------- user_config : dict[str, Any] The user configuration settings

Load pivot functions.

Load pivot functions.

Load and Initialize the query provider settings. Parameters ---------- user_config : dict[str, Any] The user configuration s

Load user defaults, if defined.

Return cluster URI from config if cluster name is passed.

Perform the VT submission of a set of IoCs of a given type. Parameters ---------- input_frame : pd.DataFrame

Lookup IoCs async.

Look up and multiple IoC observables. Parameters ---------- observables_df: pd.DataFrame A Pandas DataFr

Async wrapper for providers that do not implement lookup_iocs_async. Parameters ---------- data : Union[pd.DataFrame

Look up and single IoC observable relationships. Parameters ---------- observables_df: pd.DataFrame A Pa

Lookup IP Addresses one-by-one.

Lookup items async.

Make mocked request to get token.

Return Initiating -> Created column mapping.

Map configuration parameter names to expected values. Returns ------- dict[str, str]

Return True if the source metadata matches the filter spec.

Merge outliers and core clusters into single DataFrame. Parameters ---------- cluster_set : np.ndarray The set of clusters

Merge dict2 into dict1.

Merge procs with parents using merge_asof.

Create a new query collection.

Return text tree node header given tree depth.

Normalize elements depending on user input type.

Change any numeric columns in our core schema to strings. Some columns like PID arrive as float or int types. We need to convert the flo

Open the initial file.

Parse ASN details response into a dictionary.

Parse ASN ranges response into a list.

Parse ASN response into a dictionary.

Return translated JOIN expression.

Parse details of batch response.

Parse list, comma-delim str or str.

Parse the query status from the Kusto response.

Parse results for ALL properties.

Parse result for a specific property.

Parse VirusTotal single result based on IoCType. Parameters ---------- results_dict : Mapping[str, Any]

Parse time period string and return equivalent timedelta.

Plot series groups.

Plot data series and add legend.

Plot the entity graph with a timeline. Parameters ---------- hide : bool, optional Set true to not displ

Poll API for results for this query ID.

Populate the metadata widget with the metadata of a query. Parameters ---------- query : Query The query

Write data to Log Analytics Workspace. Parameters ---------- body : str The JSON formatted data to write

Extract dimensions and formatted values from proc_tree.

Process the data to create size column.

Parse filter string into dictionary. Parameters ---------- filterstr : str OData filter string

Process FROM clause.

Process GROUP BY clause.

Process Like clause.

Extract relevant records from the Prisma API response. This method navigates through a nested JSON structure using the specified `da

Convert the SIProcess objects recursively to a list.

Execute Sumologic query and retrieve results. Parameters ---------- query : str Sumologic query to execu

Execute OpenObserve query and retrieve results. Parameters ---------- query : str OpenObserve query to e

Raise a Kusto error.

Raise query failure exception.

Raise an unknown exception.

Raise an error if unknown exception raised.

Perform RDAP lookup with retries.