WSConfig updates - Githubissues

microsoft / msticpy

Microsoft Threat Intelligence Security Tools

Other

1.72k stars 310 forks source link

WSConfig updates #771

Closed ianhelle closed 2 months ago

ianhelle commented 2 months ago

Main fix is to allow additional connection parameters to be used with MSSentinel QueryProvider.

Fixing wsconfig
- updating a lot of legacy code
- allow link to corresponding settings to persist in WorkstationConfig instance
- allow it to use Args subkey

MSTICPyConfig

Can now use MSSentinel instead of AzureSentinel in msticpyconfig.yaml - the two should be interchangeable but it will migrate to the former by default.

azure_monitor_driver/MS Sentinel:

Can specify additional arguments to pass to connect() function by adding an Args subkey
This follows the pattern of TI and other providers and supports storage of values in key vault or environment variables
You can also pass other authentication parameters (such as client_id, client_secret) in the connect method and these will be passed to the underlying az_connect function.

Fix for vtlookup3.py

Fixed problematic way of using nestasyncio - this was causing failures when run from a langchain agent. Fix for lookup/tilookup
If the progress parameter was not passed it would still try to cancel a non-existent progress task and cause an exception.