Jupyter notebooks are continuing to grow in popularity in information security as an alternative or supplement to mainstream security operations center (SOC) tools. Notebooks can be used interactively for threat detection and response, or as automated tasks in a larger pipeline. Their flexibility and ability to combine code, data analysis, and visualization in a single, easily shareable document makes them compelling tools with almost unlimited applications and possibilities.

We’re inviting the community of analysts and engineers to join us at InfoSec Jupyterthon 2024. This online event, to be held on February 15-16, 2024, serves as an opportunity for infosec analysts and engineers to meet and engage with security practitioners using notebooks in their daily work. It is organized by our friends at Open Threat Research, together with folks from the Microsoft Threat Intelligence community.

Some of the topics to be covered in this year’s talks include:

• Analyzing Active Directory with Bloodhound CE, Jupyter, and Python
• Graphing ransomware & data leak sites trends with Plotly
• Threat hunting in three dimensions
• Guardians of Identity: OKTA’s underworld
• Hacking proprietary protocols with pandas
• Predicting Windows binary download links with Jupyter notebooks
• Comparison of collaboration methods between MSTICpy and Splunk SIEM
• Building a community around notebooks for DFIR and SecOps
• Building data-driven security tools with Streamlit
• Red teaming LLMs with Jupyter notebooks
• Automating adversary emulation
• Applying machine learning for C2 beaconing detection

We’ll also have a dedicated Discord channel for discussions and session Q&A.

We are also inviting analysts and engineers who may be interested in talking about a cool notebook or some interesting techniques or technology to submit their proposal for a session here. There are still some openings for 30-minute, 15-minute, and 5-minute sessions.

For more information, as well as recordings of previous years sessions and workshops, visit the InfoSec Jupyterthon page at: https://infosecjupyterthon.com

We’re looking forward to seeing you there!

Learn more

For the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog: https://aka.ms/threatintelblog.

To get notified about new publications and to join discussions on social media, follow us on X (formerly Twitter) at https://twitter.com/MsftSecIntel.

To hear stories and insights from the Microsoft Threat Intelligence community about the ever-evolving threat landscape, listen to the Microsoft Threat Intelligence podcast: https://thecyberwire.com/podcasts/microsoft-threat-intelligence.