Skip to content

Commit 2bfbc8c

Browse files
committed
notebooks-dedup
1 parent 447a801 commit 2bfbc8c

File tree

1 file changed

+7
-10
lines changed

1 file changed

+7
-10
lines changed

articles/sentinel/notebooks-msticpy-advanced.md

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@ ms.date: 01/09/2023
1616

1717
This article describes advanced configurations for working with Jupyter notebooks and MSTICPy in Microsoft Sentinel.
1818

19-
For more information, see [Use Jupyter notebooks to hunt for security threats](notebooks.md) and [Tutorial: Get started with Jupyter notebooks and MSTICPy in Microsoft Sentinel](notebook-get-started.md).
19+
For more information, see [Use Jupyter notebooks to hunt for security threats](notebooks.md) and [Get started with Jupyter notebooks and MSTICPy in Microsoft Sentinel](notebook-get-started.md).
2020

2121
## Prerequisites
2222

23-
This article is a continuation on from [Tutorial: Get started with Jupyter notebooks and MSTICPy in Microsoft Sentinel](notebook-get-started.md). We recommend that you perform the tutorial before continuing with the advanced procedures described below.
23+
This article is a continuation on from [Get started with Jupyter notebooks and MSTICPy in Microsoft Sentinel](notebook-get-started.md). We recommend that you perform the tutorial before continuing with the advanced procedures described below.
2424

2525
## Specify authentication parameters for Azure and Microsoft Sentinel APIs
2626

@@ -39,7 +39,7 @@ This procedure describes how to configure authentication parameters for Microsof
3939

4040
1. Select the authentication methods to use:
4141

42-
- While you can use a different set of methods from the [Azure defaults](notebook-get-started.md#specify-the-azure-cloud-and-azure-authentication-methods), this usage isn't a typical configuration.
42+
- While you can use a different set of methods from the defaults, this usage isn't a typical configuration. For more information, see the [**Getting Started Guide For Azure Sentinel ML Notebooks** notebook](notebook-get-started.md).
4343
- Unless you want to use the **env** (environment variable) authentication, leave the **clientId**, **tenantId**, and **clientSecret** fields empty.
4444
- While not recommended, MSTICPy also supports using client app IDs and secrets for your authentication. In such cases, define your **clientId**, **tenantId**, and **clientSecret** fields directly in the **Data Providers** tab.
4545

@@ -88,16 +88,14 @@ This procedure describes how to define other components that are automatically l
8888

8989
Supported components include, in the following order:
9090

91-
1. **TILookup:** The [TI provider library](notebook-get-started.md#add-threat-intelligence-provider-settings)
92-
1. **GeoIP:** The [GeoIP provider](notebook-get-started.md#add-geoip-provider-settings) you want to use
91+
1. **TILookup:** The TI provider library you want to use
92+
1. **GeoIP:** The GeoIP provider you want to use
9393
1. **AzureData:** The module you use to query details about [Azure resources](#specify-authentication-parameters-for-azure-and-microsoft-sentinel-apis)
9494
1. **AzureSentinelAPI:** The module you use to query the [Microsoft Sentinel API](#specify-authentication-parameters-for-azure-and-microsoft-sentinel-apis)
9595
1. **Notebooklets:** Notebooklets from the [msticnb package](https://msticnb.readthedocs.io/en/latest/)
9696
1. **Pivot:** Pivot functions
9797

98-
> [!NOTE]
99-
> The components load in this order because the Pivot component needs query and other providers loaded to find the pivot functions that it attaches to entities. For more information, see [MSTICPy documentation](https://msticpy.readthedocs.io/en/latest/data_analysis/PivotFunctions.html).
100-
>
98+
The components load in this order because the Pivot component needs query and other providers loaded to find the pivot functions that it attaches to entities. For more information, see [MSTICPy documentation](https://msticpy.readthedocs.io/en/latest/data_analysis/PivotFunctions.html). For more information, see the [**Getting Started Guide For Azure Sentinel ML Notebooks** notebook](notebook-get-started.md).
10199

102100
**To define auto-loaded MSTICPy components**:
103101

@@ -110,8 +108,7 @@ Supported components include, in the following order:
110108

111109
1. In the **Autoload Components** tab, define any parameter values as needed. For example:
112110

113-
- **GeoIpLookup**. Enter the name of the GeoIP provider you want to use, either *GeoLiteLookup* or *IPStack*. For more information, see [Add GeoIP provider settings](notebook-get-started.md#add-geoip-provider-settings).
114-
111+
- **GeoIpLookup**. Enter the name of the GeoIP provider you want to use, either *GeoLiteLookup* or *IPStack*.
115112
- **AzureData and AzureSentinelAPI components**. Define the following values:
116113

117114
- **auth_methods:** Override the default settings for AzureCLI, and connect using the selected methods.

0 commit comments

Comments
 (0)