threat-hunting-with-notebooks

KO | EN

gitlite — search

#python #react #llm #go #golang #android #linux #nodejs #cli #kubernetes #awesome-list #security #mcp #ios

threat-hunting-with-notebooks

(★ 70)

Repository with Sample threat hunting notebooks on Security Event Log Data Sources

threat-hunting-with-notebooks Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# threat-hunting-with-notebooks

Demo files associated with "Threat Hunting with Notebook technologies" presented at Secureworld conferernce in Seattle, WA 
 https://events.secureworldexpo.com/agenda/seattle-wa-2018/

Presentation: https://www.slideshare.net/ashwin_patil/threat-hunting-using-notebook-technologies

Github jupyter notebook viewer does not parse well, use online services such as [nbviewer](https://nbviewer.jupyter.org), [mybinder](https://mybinder.org/), free computer to view and interact with notebooksby providing github notebook/repo URL.

## Launch Binder
[![Binder](https://mybinder.org/badge_logo.svg)](https://mybinder.org/v2/gh/ashwin-patil/threat-hunting-with-notebooks.git/master)

# Threat Hunting Example Notebooks

**Basic Data Analysis and Visualization on Failed Logon Data** :: [nbviewer](https://nbviewer.jupyter.org/github/ashwin-patil/threat-hunting-with-notebooks/blob/master/Azure%20Data%20Explorer-%20Kqlmagic%20Demo.ipynb)
 - Data Source : Azure Data Explorer
 - Language: Python

**Time series anomaly detection on successful logon data using anomalize package** :: [nbviewer](https://nbviewer.jupyter.org/github/ashwin-patil/threat-hunting-with-notebooks/blob/master/Azure%20Data%20Lake%20with%20anomalize%20R%20Demo.ipynb)
 - Data Source : Azure Data Lake
 - Language: R

**Threat Hunting with ip address from logs** :: [nbviewer](https://nbviewer.jupyter.org/github/ashwin-patil/threat-hunting-with-notebooks/blob/master/threat-hunting-with-ipaddress-from-logs-Public.ipynb)
 - Data Source : csv file with 4688 along with command line logs
 - Language: Python

**Open Source Threat Intel Lookup using requests** :: [nbviewer](https://nbviewer.jupyter.org/github/ashwin-patil/threat-hunting-with-notebooks/blob/master/Open%20Source%20Threat%20Intel%20lookup%20using%20Requests%20API.ipynb)
 - Language: Python

**Anomaly detection and visualization using Time Series Decomposition** :: [nbviewer](https://nbviewer.jupyter.org/github/ashwin-patil/threat-hunting-with-notebooks/blob/master/Jupyterthon-TimeSeries%20Demo.ipynb)
 - Language: Python

**Analyzing billions of passwords from Breach compilation dataset** :: [nbviewer](https://nbviewer.org/github/ashwin-patil/threat-hunting-with-notebooks/blob/master/Jupyterthon-2022-Analysis%20of%20Billion%20Passwords.ipynb)
 - Data Source : Multiple txt and csv file in data folder
 - Language: Python

threat-hunting-with-notebooks

threat-hunting-with-notebooks Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

threat-hunting-with-notebooks

threat-hunting-with-notebooks Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README