Anomaly Sequence Detection and Morph Charts
This release includes:
Anomaly sequence analysis and visualization using Markov chain @karishma-dixit
Morph Chart visualization of log events @petebryan
New Features
- Anomalous sequences
Markov Chain anomaly analysis for sequences of commands/patterns in a session - Morph Charts visualization - 3D visualization of event data using experimental
Morph Charts exploration - nbinit: a neater and more robust startup/setup function for Jupyter notebooks
handling package installs, imports and option setting - Azure Sentinel Queries
- Added two Logon fail queries for linux
- Add Linux logons for host
- Added msticpy.common.pkg_config.validate_config() to validate current config
or external config file
Fixes
- f78a29e:
- Change return type on for bokeh graphs to return whole layout
- Improved geoip error messages when Api key is missing
- Fixing bug in pkg_config if no workspaces are defined (empty workspaces key)
- 31cb17f: Added context manager to temporarily set msticpyconfig to another path and auto-revert settings afterwards.
- 827477b: make titles consistent on the widgets page (#59)
- 7964b5f: Fix to utility.py - check_and_install_missing_packages to all package version to be specified.
- f793d55:
- Updated pkg_config to allow AzureCLI and AzureSentinel sections to use Key Vault protection of the keys and use of Env Vars, etc.
- Timeline - fixed Tooltip representation of Timestamps for different representations of numpy's types
- Fixed an error in test-pypi-test-pkg.cmd
- 3e42e42: Doc fix and OutOfBoundsDatetime catch
- efc3d69: OTX TI Provider fixes to encode URL IoC prior to submitting
- 0ad166a: fixing headings in rst docs for timeseries
- 606fc8f: Fixing broken Readthedocs link (#53)
- 4810e1f: Fixing some documentation omissions/errors (#52)
- 43bbd3c: Updating pylintrc to change limits for some checks.
- f50eec2: Notebooklet queries and timeline hide option