search

Azure / Azure-Sentinel-Notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.
MIT License
551 stars 190 forks source link

A Tour of Cybersec Notebook Featires #227

Open reginatwopointo opened 1 year ago

reginatwopointo commented 1 year ago

My data environment is set to MSSentinel (or AzureSentinel - legacy name)

Even though I have the necessary permissions and authenticated to Sentinel Workspace and can run test queries on Sentinel tables, when I am using predefined Queries from the Queries list, I get an error:

image

MsticpyDataQueryError Traceback (most recent call last) Cell In[34], line 1 ----> 1 qry_prov.Azure.list_all_signins_geo()

ianhelle commented 12 months ago

Sorry for the huge delay in looking at this. Could you upload the full stack trace? The screen shot has some critical bits of info missing. You can also try this before running the query to turn on more detailed logging.

import msticpy as mp
mp.set_logging_level("INFO")

Set it back to default with mp.set_logging_level("WARNING") or just restart the kernel