# MSTIC Jupyter and Python Security Tools

Microsoft Threat Intelligence Python Security Tools.

msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to:

* query log data from multiple sources
* enrich the data with Threat Intelligence, geolocations and Azure resource data
* extract Indicators of Activity (IoA) from logs and unpack encoded data
* perform sophisticated analysis such as anomalous session detection and time series decomposition
* visualize data using interactive timelines, process trees and multi-dimensional Morph Charts

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FmQ0CFqBXceCAmX4Q39xP%2Fimage.png?alt=media&#x26;token=af75db33-3b68-4b5d-b94e-ec29b3fe1e4b" alt=""><figcaption></figcaption></figure>

{% embed url="https://github.com/microsoft/msticpy" %}
