You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: learn-pr/wwl-sci/perform-threat-hunting-sentinel-with-notebooks/includes/4-create-notebook.md
+14-7Lines changed: 14 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,7 +20,8 @@ To get started with Notebooks, use the *Getting Started Guide For Microsoft Sent
20
20
21
21
1. At the bottom of the page, select **Review + create**. Then on the next page, select **create**. It takes a moment to deploy the workspace.
22
22
23
-
> [!NOTE] It takes a few minutes to deploy the Machine Learning workspace.
23
+
> [!NOTE]
24
+
> It takes a few minutes to deploy the Machine Learning workspace.
24
25
25
26
1. After *Your deployment is complete* message appears, return to Microsoft Sentinel.
26
27
@@ -40,25 +41,29 @@ To get started with Notebooks, use the *Getting Started Guide For Microsoft Sent
40
41
41
42
1.1. In the command bar, to the right of the **Compute:** selector, select the **+** symbol to *Create Azure ML compute* instance. **Hint:** It might be hidden inside the ellipsis icon **(...)**.
42
43
43
-
> [!NOTE] You can have more screen space by hiding the Azure ML Studio left blade by selecting the *Hamburger menu* (3 horizontal lines on the top left), and by collapsing the Notebooks Files by selecting the **<<** icon.
44
+
> [!NOTE]
45
+
> You can have more screen space by hiding the Azure ML Studio left blade by selecting the *Hamburger menu* (3 horizontal lines on the top left), and by collapsing the Notebooks Files by selecting the **<<** icon.
44
46
45
47
1. Type a unique name in the *Compute name* field. This identifies your compute instance.
46
48
47
49
1. Scroll down and select the first option available.
48
50
49
-
> [!TIP] Workload type: Development on Notebooks (or other IDE) and light weight testing.
51
+
> [!TIP]
52
+
> Workload type: Development on Notebooks (or other IDE) and light weight testing.
50
53
51
54
1. Select the **Review + Create** button at the bottom of the screen, then scroll down and select **Create**. Close any feedback window that may appear. This takes a few minutes. You see a notification (bell icon) when it's done and the *Compute instance* left icon turns from blue to green.
52
55
53
56
1. Once the Compute has been created and running, verify that the kernel to use is *Python 3.10 - Pytorch and Tensorflow*.
54
57
55
-
> [!TIP] This is shown in the right of the menu bar. If that kernel isn't selected, select the *Python 3.10 - Pytorch and Tensorflow* option from the drop-down list. You may need to select the **Refresh** icon on the far right to see the kernel options.
58
+
> [!TIP]
59
+
> This is shown in the right of the menu bar. If that kernel isn't selected, select the *Python 3.10 - Pytorch and Tensorflow* option from the drop-down list. You may need to select the **Refresh** icon on the far right to see the kernel options.
56
60
57
61
1. Select the **Authenticate** button and wait for the authentication to complete.
58
62
59
63
1. Clear all the results from the notebook by selecting the **Clear all outputs** (Eraser icon) from the menu bar and follow the *Getting Started* tutorial.
60
64
61
-
> [!TIP] This can be found by selecting the ellipsis (...) from the menu bar.
65
+
> [!TIP]
66
+
> This can be found by selecting the ellipsis (...) from the menu bar.
62
67
63
68
1. Review section *1 Introdution* in the notebook and proceed to section *2 Initializing the notebook and MSTICPy*.
64
69
@@ -73,10 +78,12 @@ To get started with Notebooks, use the *Getting Started Guide For Microsoft Sent
73
78
74
79
1. The code ran successfully if *msticpyconfig.yaml* was created in the *utils* folder in the *file explorer* pane on the left. It may take another 30 seconds for the file to appear. If it doesn't appear, select the **Refresh** icon in the *file explorer* pane.
75
80
76
-
> [!TIP] You can clear the output messages by selecting the ellipsis (...) on the left of the code window for the *Output menu* and selecting the *Clear output* (square with an x*) icon.
81
+
> [!TIP]
82
+
> You can clear the output messages by selecting the ellipsis (...) on the left of the code window for the *Output menu* and selecting the *Clear output* (square with an x*) icon.
77
83
78
84
1. Select the **msticpyconfig.yaml** file in the *file explorer* pane on the left to review the contents of the file and then close it.
79
85
80
86
1. Proceed to section *3 Querying data with MSTICPy* and review the contents. Don't run the *Multiple Microsoft Sentinel workspaces* code cell as it fails, but the other code cells can be run successfully.
81
87
82
-
>**Note:** If you cannot complete the steps above to access the Notebook, you can follow it on its GitHub viewwer page instead. [Getting Started with Azure ML Notebooks and Microsoft Sentinel](https://nbviewer.org/github/Azure/Azure-Sentinel-Notebooks/blob/master/A%20Getting%20Started%20Guide%20For%20Azure%20Sentinel%20ML%20Notebooks.ipynb)
88
+
> [!NOTE]
89
+
> If you cannot complete the steps above to access the Notebook, you can follow it on its GitHub viewwer page instead. [Getting Started with Azure ML Notebooks and Microsoft Sentinel](https://nbviewer.org/github/Azure/Azure-Sentinel-Notebooks/blob/master/A%20Getting%20Started%20Guide%20For%20Azure%20Sentinel%20ML%20Notebooks.ipynb)
0 commit comments