Azure / Azure-Sentinel-Notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.
MIT License
551 stars 190 forks source link

Notebook "A Getting Started Guide for Azure Sentinel notebooks with PowerShell" outdated, incompatible and may downgrade libraries in new comput instances #203

Closed ktb-jcm closed 1 month ago

ktb-jcm commented 1 year ago

The notebook file "A Getting Started Guide for Azure Sentinel notebooks with PowerShell" has not been updated in two years.

Of note is if you create a new instance and then run this notebook, one of the first steps is to download and install v18.04 of the Microsoft debian repository config, which results in a downgrade. Effectively, this destroys the utility of the compute instance and possibly opens up vulnerabilities.

Current guidance, from the dotnet interactive developers, is provided here: https://github.com/dotnet/interactive/blob/main/docs/NotebookswithJupyter.md

zhzhao8888 commented 1 year ago

This notebook has very low usage, we will retire this notebook.