Notebooklets Details

• Notebooklet Class - AccountSummary
  • Display Sections
    • Account Summary
  • Results Class
    • AccountSummaryResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - EnrichAlerts
  • Display Sections
  • Results Class
    • TIEnrichResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - HostLogonsSummary
  • Display Sections
  • Results Class
    • HostLogonsSummaryResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - HostNetworkSummary
  • Display Sections
  • Results Class
    • HostNetworkSummaryResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - HostSummary
  • Display Sections
    • Host Entity Summary
  • Results Class
    • HostSummaryResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Other Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - LogonSessionsRarity
  • Display Sections
    • Calculate process rarity statistics for logon sessions
  • Results Class
    • LogonSessionsRarityResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - IpAddressSummary
  • Display Sections
    • Azure Sign-ins and audit activity from IP Address
    • Azure Azure NSG Flow Logs for IP
    • Office 365 operations summary from IP Address
    • Public IP data (GeoIP, ThreatIntel, Passive DNS, VPS membership)
    • Azure Sentinel alerts related to the IP
    • Azure Sentinel alerts related to the IP
    • Azure Network Analytics Topology record for the IP
    • Common security log
    • Defender device information
    • Network connections
    • Azure Sentinel heartbeat record for the IP
    • Host logons
    • Related accounts
    • Azure VMComputer record for the IP.
    • Summary of Azure NSG network flow data for this IP Address
  • Results Class
  • Methods
    • __init__
    • browse_alerts
    • browse_ti_results
    • display_alert_timeline
    • netflow_by_direction
    • netflow_by_protocol
    • netflow_total_by_protocol
    • run
    • check_table_exists
    • check_valid_result_data
    • get_methods
    • get_pivot_run
    • get_provider
    • list_methods
    • run_nb_func
    • run_nb_funcs
    • add_nb_function
    • all_options
    • default_options
    • description
    • entity_types
    • get_help
    • get_settings
    • import_cell
    • keywords
    • list_options
    • match_terms
    • name
    • print_options
    • result
    • show_help
    • silent
  • run function documentation
• Notebooklet Class - NetworkFlowSummary
  • Display Sections
    • Host Network Summary
  • Results Class
    • NetworkFlowResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Other Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - URLSummary
  • Display Sections
    • URL Summary
  • Results Class
    • URLSummaryResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Other Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options
• Notebooklet Class - WinHostEvents
  • Display Sections
    • Host Security Events Summary
  • Results Class
    • WinHostEventsResult
    • Attributes
  • Methods
    • Instance Methods
    • Inherited methods
    • Other Methods
  • run function documentation
    • Parameters
    • Other Parameters
    • Returns
    • Raises
    • Default Options
    • Other Options