Highlights
Multi-dimensional plots for outliers by @Tatsuya-hasegawa
The outliers module has lived in MSTICPy for a long time but been some neglected
@Tatsuya-hasegawa (hacker-T) has contributed some cool visualizations to
better interpret the data.
Many thanks!!!
import numpy as np
from msticpy.analysis.outliers import identify_outliers,plot_outlier_results
n_dimension = 7
# create random numeric samples
data = np.random.rand(100, n_dimension)
# calc outliers by Isolation Forest algorism
clf, X_outliers, y_pred_outliers = identify_outliers(data, data, contamination=0.1, max_features=0.4)
feature_columns = [f'feature{i}' for i in range(1, n_dimension+1)]
plot_outlier_results(
clf,
data,
data,
X_outliers,
feature_columns=feature_columns,
plt_title="MSTICPY Isolation Forest Anomaly Detection for Multi Dimension Features"
)
Improved code/docs for federated authentication for M365D/M356 Graph providers - @ryan-detect-dot-dev
Although using federated auth (rather than client secret) has been possible for a while, the documentation
for how to use this was in the MSTICPy docs. Thanks to Ryan we now have this (along with cleaned up code
for the Defender* data providers.
(although Ryan is listed as a new contributor below - he has made several previous contributions under
a different GitHub identity)
Rigorous Type Annotation work started by @FlorianBracq earlier this year continues.
This helps to make the code more robust and clearer to read and use. This is thankless work but my
huge thanks go out to @FlorianBracq for this!
Other fixes
Some other important fixes to CyberReason driver and Azure Monitor/MS Sentinel driver are also included
What's Changed
- Cybereason driver fix http429 tests and exception by @vx3r in #803
- Cybereason driver query return instance name in dataframe by @vx3r in #804
- Add multi dimension plots to analysis.outliers module. by @Tatsuya-hasegawa in #805
- Avoid httpx 0.28.0 for unit tests by @ianhelle in #811
- Add typing hints to core classes by @FlorianBracq in #810
- Fixing azure_monitor_driver for deprecated httpx API by @ianhelle in #809
- Update version to 2.15.0 by @ianhelle in #806
- Update MDATP Driver for delegated auth by @ryan-detect-dot-dev in #784
New Contributors
- @ryan-detect-dot-dev made their first contribution in #784
Full Changelog: v2.14.0...v2.15.0