github microsoft/msticpy v0.9.0
MSTICPy Pivot functions

latest releases: v2.12.0, v2.11.0, v2.10.0...
3 years ago

The big feature update for this release is pivot functions. These link much of the functionality of MSTICPy to entities (like IP Address, Host, URL). This includes queries, TI and GeoIP lookups and a number of other utility functions. It means that, if you have a function that you want to run (e.g. a WhoIs lookup) you don't need to remember which module to install or what the function syntax is - you can find this function as an attribute of the IpAddress entity class.
The second advantage that pivot functions bring is consistency. All the functions have a wrapper layer that normalizes both input and output.
All functions can take input as a string, a list (or other iterable) or a pandas Dataframe. They all return the results as a Dataframe as well, making it easier to display/read the output and use the output as input to further functions.

New Features #127

  • Pivot functions
  • Refactored entities into separate modules and added graphing extensions
  • Update MordorData.rst doc with better intro section
  • Added function to AzureResource entity to break up resource string and expose individual elements
  • Adding hash_account as separate item type to data_obfus.py
  • Making hash_ip more flexible - ignoring things like localhost

Fixes

  • Fixing the credscan suppression for test_splunk_uploader
  • Correction to FoliumMap.ipynb
  • Added flexible import to deal with azure-mgmt-monitor version changes.
  • Bug fix and nasty workaround for old test setup removed in pkg_config.py
  • PR updates adding comments, some grammar fixes and obfuscation of names.
  • Fixed a bug in path construction for download file.
  • 7b0b0d5@Mypy warning in new release of mypy. (#134)
  • Fixing lint/formatting errors in vtlookupv3.

Don't miss a new msticpy release

NewReleases is sending notifications on new releases.