Skip to content

Commit f524617

Browse files
committed
fixing intro
1 parent 82bc40e commit f524617

File tree

1 file changed

+5
-10
lines changed

1 file changed

+5
-10
lines changed

articles/sentinel/notebook-get-started.md

Lines changed: 5 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -33,13 +33,8 @@ Before you begin, make sure you have the required permissions and resources.
3333
|---------|---------|
3434
|**Permissions** | To use notebooks in Microsoft Sentinel, make sure that you have the required permissions. <br><br>For more information, see [Manage access to Microsoft Sentinel notebooks](notebooks.md#manage-access-to-microsoft-sentinel-notebooks). |
3535
|**Python** | To perform the steps in this article, you need Python 3.6 or later. <br><br>In Azure Machine Learning, you can use either a Python 3.8 kernel (recommended) or a Python 3.6 kernel. If you use the notebook described in this article in another Jupyter environment, you can use any kernel that supports Python 3.6 or later.<br><br> To use MSTICPy notebooks outside of Microsoft Sentinel and Azure Machine Learning (ML), you also need to configure your Python environment. Install Python 3.6 or later with the Anaconda distribution, which includes many of the required packages. |
36-
|[**MaxMind GeoLite2**](https://www.maxmind.com) | This notebook uses the MaxMind GeoLite2 geolocation lookup service for IP addresses. To use the MaxMind GeoLite2 service, you need an account key. You can sign up for a free account and key at the [Maxmind signup page](https://www.maxmind.com/en/geolite2/signup). |
37-
|[**VirusTotal**](https://www.virustotal.com) | This notebook uses VirusTotal (VT) as a threat intelligence source. To use VirusTotal threat intelligence lookup, you need a VirusTotal account and API key. <br><br> |
38-
39-
> [!WARNING]
40-
> If you're using a VT enterprise key, store it in Azure Key Vault instead of the **msticpyconfig.yaml** file. For more information, see [Specify secrets as Key Vault secrets](https://msticpy.readthedocs.io/en/latest/getting_started/msticpyconfig.html#specifying-secrets-as-key-vault-secrets) in the MSTICPY documentation.
41-
>
42-
> If you don’t want to set up an Azure Key Vault right now, sign up for and use a free account until you can set up Key Vault storage.
36+
|[**MaxMind GeoLite2**](https://www.maxmind.com) | This notebook uses the MaxMind GeoLite2 geolocation lookup service for IP addresses. To use the MaxMind GeoLite2 service, you need a license key. You can sign up for a free account and key at the [Maxmind signup page](https://www.maxmind.com/en/geolite2/signup). |
37+
|[**VirusTotal**](https://www.virustotal.com) | This notebook uses VirusTotal (VT) as a threat intelligence source. To use VirusTotal threat intelligence lookup, you need a VirusTotal account and API key. <br><br>If you're using a VT enterprise key, store it an Azure Key Vault instead of the **msticpyconfig.yaml** file. For more information, see [Specify secrets as Key Vault secrets](https://msticpy.readthedocs.io/en/latest/getting_started/msticpyconfig.html#specifying-secrets-as-key-vault-secrets) in the MSTICPY documentation. <br><br>If you don’t want to set up an Azure Key Vault right now, sign up for and use a free account until you can set up Key Vault storage. |
4338

4439
## Install and run the Getting Started Guide notebook
4540

@@ -66,7 +61,7 @@ This procedure describes how to launch your notebook with Microsoft Sentinel.
6661
Depending on the function being performed, the code in the cell might run quickly, or it might take a few seconds to complete. When the cell is running, the play button changes to a loading spinner, and the status is displayed at the bottom of the cell, together with the elapsed time.
6762

6863
Run the code cells in the **Introduction** section to learn the basics of running code in notebooks, and then run the code in the **Initializing the notebook and MSTICPy** section to set up your initial environment.
69-
64+
7065
When initializing the notebook, configuration warnings about missing settings are expected because you didn't configure anything yet.
7166

7267
## Create your configuration file
@@ -128,7 +123,7 @@ For more information about other supported threat intelligence providers, see [T
128123

129124
### Add GeoIP provider settings
130125

131-
This procedure describes how to store a [MaxMind GeoLite2 account key](#prerequisites) in the **msticpyconfig.yaml** file, which allows your notebook to use geolocation lookup services for IP addresses.
126+
This procedure describes how to store a [MaxMind GeoLite2 license key](#prerequisites) in the **msticpyconfig.yaml** file, which allows your notebook to use geolocation lookup services for IP addresses.
132127

133128
To add GeoIP provider settings in the MSTICPy settings editor, complete the following steps.
134129

@@ -141,7 +136,7 @@ To add GeoIP provider settings in the MSTICPy settings editor, complete the foll
141136

142137
1. In the **GeoIP Providers** tab, from the **Add prov** dropdown, select **GeoIPLite** > **Add**.
143138

144-
1. In the **Value** field, enter your MaxMind account key.
139+
1. In the **Value** field, enter your MaxMind license key.
145140

146141
1. If needed, update the default **~/.msticpy** folder for storing the downloaded GeoIP database.
147142

0 commit comments

Comments
 (0)