Skip to content
Branch: master
Find file History
Permalink
Type Name Latest commit message Commit time
..
Failed to load latest commit information.
HowTos Adding notebook for PowerShell Mar 20, 2019
Sample-Notebooks Bug/reliability fixes for RSA based on new demo environment data and … ( Mar 4, 2019
utils Adding utils Feb 11, 2019
Get Started.ipynb Add files via upload Feb 28, 2019
Guided Hunting - Office365-Exploring.ipynb Bug/reliability fixes for RSA based on new demo environment data and … ( Mar 4, 2019
Guided Hunting - Windows-Host-Explorer.ipynb Bug/reliability fixes for RSA based on new demo environment data and … ( Mar 4, 2019
Guided Investigation - Process-Alerts.ipynb Bug/reliability fixes for RSA based on new demo environment data and … ( Mar 4, 2019
README.md
config.json Adding config Feb 11, 2019
requirements.txt

README.md

Azure Notebooks for Azure Sentinel

What is Azure Notebooks?

Azure Notebooks is a free hosted service to develop and run Jupyter notebooks in the cloud with no installation. Jupyter is an open source project that lets you easily combine markdown text, executable code (Python, R, and F#), persistent data, graphics, and visualizations onto a single, sharable canvas called a notebook.

How do Azure Notebooks work?

Interactive Azure Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors. Each Azure Notebook is purpose-built with a self-contained workflow for a specific use case. Visualizations are included in each Azure Notebook for faster data exploration and threat hunting. Click on the button below to clone our prebuilt investigation and hunting Azure Notebooks into projects that belong to you. Modify and tailor your projects to your environment. Either run the Azure Notebooks for free or, for better performance, run them on a dedicated virtual host. Click here to learn more

Using the Notebooks locally or in other environments

Azure Sentinel will provision notebooks and supporting modules for you in Azure Notebooks. You can also download the notebooks and modules and use them locally in a supported Python environment (Anaconda Distribution is recommended) or another notebook hosting environment such as Azure Databricks or a JupyterHub environment that supports Python 3.6 or later.


Interactive in Azure (requires logging in):

View Get Started notebook

Other resources

  • View sample notebooks in the Sample-Notebooks folder
  • How tos and Troubleshooting in the How-Tos folder

Feedback

For questions or feedback, please contact AzureSentinel@microsoft.com

You can’t perform that action at this time.