Overview

The work in this release is mostly bug fixes and usability improvements
Pull request for all changes is #147

New Features

• 20db6cb@Added prompt_for_ws function to wsconfig.py. Also added more detail to warnings on how to fix things.

ws_config.prompt_for_ws()

• Replace matplotlib draw_entity_alert_graph with Bokeh version in nbdisplay.py
• Changes to nbinit.py/init_notebook:
  • Added documentation URLs to warnings - so it's easier to find how to fix a config problem
  • added KQLMAGIC_CONFIGURATION to enable trying AzureCLI SSO by default. This allows a user to logon using az login on the
    Jupyter host and have KqlMagic auto-signin
  • added pandas config to return schema with dataframe html to render using native nteract data browser. This allows the nteract
    notebook to display data using the native data browser.
• b055a45@Added local function cache to GeoIP lookup to better handle repeated IPs
• 423e76e@Adding more queries for notebooklets - for VMComputer and DNSEvents tables
• 4a029b5@Add create static method to Entity class to instantiate entity from dict or pd.

Account.create(entity_properties_dict)

• cebefd3@
  • Added links to medium articles in ReadtheDocs
  • Generated new DataQueries.rst doc
  • Added KqlmagicCustom[jupyter-basic] back to core components and updating docs for this in Installing.rst
  • Setting KQLMAGIC_EXTRAS_REQUIRE env var in package init.py to prevent warnings in Kqlmagic
  • Reordered params in wsconfig.py WorkspaceConfig so that you can supply the workspace name as single positional parameter rather than
    a keyword parameter. E.g.

ws_config = WorkspaceConfig("myworkspace")

• Change kql_driver.py so that you can supply a WorkspaceConfig instance as the "connection_str":

qry_prov.connect(WorkspaceConfig("myworkspace"))

• Change to pivot_register run function to return single "raw" result (vs. a list of one item) if it is a list of one item - this is used by
  notebooklets.
• Add Pivot and entities as auto-imported items to init_notebook function, so they don't need to be manually imported in the notebook.
• a46b57f@Updated notebooksamples.rst with latest notebooks.notebooksamples
  • Added Releases.rst - pointer to GitHub release page.

Fixes

• bbc348f@
  • Workarounds for some test errors in test_nbinit.py and test_user_config.pyUpdating requirements-dev.txt with pip-compatible versions.
  • Adding same updates to conda-reqs-dev.txt and conda-reqs-dev-pip.txt
• 51db655@
  • Fixing test error - seems like subtle change or bug in pandas groupby behavior - in sessionize.pyChanging Development Status classifier and adding some extra keywords in setup.py
  • Adding more verbose output to try to catch spurious errors in test_nbinit.py
• 7d7b06e@Adding beautifulsoup4 and markdown to dev/test requirements in requirements-dev.txt and conda-reqs-dev.txtAdding time unit control to QueryTime widget to allow interactive setting of day/week/month. Also increased the max range for these units - in nbwidgets.py
• 21cc5c4@black formatting of security_alert
• cc8118c@Adding markdown to requirements-dev.txt
• 20db6cb@
  • Corrected pip extras syntax in Installing.rst
  • Invalid return type in pkg_config.py:: validate_config
• b055a45@
  • Adding file lock to unit_test_lib::custom_mp_config - because settings are global, multiple test processes can change the settings on each other.
  • Minor updates to test_nbinit.py
  • Fix in pivot_register.py - _iterate_func did not pass through **kwargs to function. Also added a few comments to explain what's going on
  • Bug in security_alert_graph - if NTDomain attribute is None
  • Missing update to all_ips perf optimizatio nin convert_to_ip_entities
  • Adding filelock to dev requirements-dev.txt
• 229ee09@Fixing infinite recursion issue in process_tree_utils.py Issue #148
• 98108cc@Merge remote-tracking branch 'origin/master' into ianhelle/rel1.0.0-cleanup-2021-03-12
• 423e76e@
  • Fixing wording in SelectAlert widget
  • Fixing potential None value error in GetText and GetEnvironmentText
  • Fixing a few bugs and tidying in convert_to_ip_entities in ip_utils.py
  • Random linting errors.
  • Fixing issue #146 - Error is thrown when AzureSentinel config is not present in msticpyconfig.yaml file
  • Added extra tests for nbinit.py in test_nbinit.py
• 707a201@Minor fixes to Azure Sentinel API and Entities (#141)* f-strings and entity update
  • CloudError response updates
  • Fix - security_alert when props are not defined
  • Changed key accessor to get() calls with defaults in security_alert (so does not break if key is missing).
• 4a029b5@Fix bug in ip_utils.py convert to entities
• 7403477@Fix broken link to MPSettingsEditor.ipynb (#145)
• dafdc44@Fix to provider name handling in user_config.py
• cebefd3@
  • Fixed QueryProviderDocumenter.ipynb bug
• 7b00a5c@Doc string error - prospector - in test_mp_extras.py
• 64ac03a@Fixing test error in test_nbinit.pySome fixes to notebooks (mainly getting rid of uneeded Seaborn refs)
• a46b57f@Cleanup and bug fixes for v1.0 - dependencies.-
  • Updated msticpy notebooks
  • Updated setup.py, requirements.txt and conda-reqs with new/non-conflicting version
  • Fix to test_nbinit.py and import_analyzer.py
  • Added test script for dependencies/extras
  • Fix to README
  • Removed random unicode char in PivotFunctions.rst