Create folium feature group.

Return HTML formatted text for tooltips and popups.

Return dict of partial module names to full names.

Create a network object from RDAP data.

Create a Parameter object.

Return the text of a Pipfile.

Generate metadata section of the YAML file for the given folder_name. Parameters ---------- folder_name : str Either "Huntin

Delete an item at `path`.

Return true if an environment should be detected.

Ensure that we have an event loop available.

Return results of multiple queries run as threaded tasks.

Return the list of IP entities that have a Location property.

Extract field/value from the message dictionary. Parameters ---------- mssg_type : str The Audit message type message_di

Extract and return resource ID components from URL.

Return summary of item.

Parse an auditd message string and extract the message time. Parameters ---------- audit_str : str The Audit message Re

Remove any imports that start with items in `excl_prefixes`.

Remove all imports without dotted names.

Return OSFamily and path separator to use from entities or file paths.

Flatten Cybereason result to a format that can be handled by pandas. Parameters ---------- entry: dict[str, Any]

Format a pandas series logon record.

Replace dynamic params in the response string.

Replace dynamic params in the response string.

Return normalized name for use as a KeyVault secret name.

Return ORDER BY item with sort direction.

Format the inputted query name for use as a file name. Parameters ---------- qname : str Name of a Sentinel Query as read fr

Generate test data for iterable funcs.

Get the alert by alert_id.

Return encoding type and decoded result. Decoded result is list of hex bytes in the case that the decoded result is not a string

Return the center (median) of the coordinates.

Return the details on a Virtual Machine instance. Parameters ---------- resource_id: str The Resource ID

Get config from msticpyconfig.

Return tooltip and formatter entries for column.

Return For dotted attribute, tries to search. Parameters ---------- elem_path : str The attribute name or prefix.name da

Get V3 entity name for an entity. Parameters ---------- entity_type : Type The Entity class Ret

Return optionally filtered list of option tuples.

Return list of fired alerts in dataframe. Returns ------- pd.DataFrame Dataframe with list of fired aler

Get the correct path containing GeoLite City Database. Returns ------- Optional[str] Returns the absolut

Return settings for a provider. Parameters ---------- provider_name : str Name of the provider. Returns -------

Get the hashes, encoding type and printable form of binary. (either string or list of hex-encoded byte values)

Return current set of datasets for select control.

Download and return Mitre techniques and tactics. Parameters ---------- cache_folder : Optional[str] Folder to search for mo

Build a MSTICPy specific User Agent string.

Get name and description for entity.

Get the timespan access function from Pivot global instance.

Get the list of all modules from file paths.

Lookup configuration values config, environment or KeyVault. Parameters ---------- setting_path : str Dotted path to the set

Return list of saved searches in dataframe. Returns ------- pd.DataFrame Dataframe with list of saved se

Return value with matching variant spelling key.

Return the subset of IoC types supported by VT.

Return tab definitions and arguments.

Get test workspace settings from config file.

Process different init time parameters from kwargs.

Return the timespan for the query API call.

Try to list secrets - will throw ClientAuthentication error on failure.

Return results DF.

Handle HTTP Status errors.

Run queries again when a timeout was received. Parameters ---------- body: dict[str, Any] Body of the HT

Hash IP address. Parameters ---------- ip_addr : str IP address string Returns ------- str Hashed IP Ad

Return True if help parameter passed.

Import object or submodule from `pkg`.

Import named module and assign to global alias.

Import all from named module add to globals.

Create a SentinelQuery attr object for a given yaml query. Parameters ---------- yaml_path : str File path to a YAML Sentine

Initialize a component or query provider. Parameters ---------- name : str The name of the component or query provider.

Try to convert different parameter formats to list.

Display in IPython.

If this is known file type return the prefix and file type.

Load provider classes based on config.

Load any lazily-loaded tab content.

Look up and single IoC observable. Parameters ---------- observable: str The observable value vt

Map configuration parameter names to expected values.

Return KQL function for SQL function.

Return case-insensitive matches for tactics list.

Retrieve paginated results from Prisma Cloud API. This method handles API pagination by repeatedly sending requests until the