msticpy (Microsoft Threat Intelligence and Security Tool) is a Python library designed for security data acquisition, enrichment, analysis, and visualization, primarily within Jupyter notebooks. It provides a unified interface to multiple data sources (Azure Sentinel, Splunk, Kusto, Microsoft Defender, VirusTotal, and many others) through a pluggable driver architecture, and supports threat intelligence lookups via a wide range of providers (AlienVault OTX, VirusTotal, IBM XForce, etc.). The library offers a rich data model for security entities (Host, Process, Account, etc.) and a pivot framework that attaches relevant queries and enrichment functions directly to entity objects, enabling efficient investigative workflows. It also includes interactive widgets for configuration, query time selection, and browsing results, as well as visualization components such as timelines, process trees, entity graphs, and maps. Despite being notebook-centric, it is structured as a well-architected Python library with clear separation of concerns, extensive use of abstract base classes and mixins, and comprehensive test coverage. While the codebase is large and has some dependencies on external APIs and Azure services, its core patterns (driver base, TI provider base, pivot registration, and utility modules) are self-contained and could be extracted for reuse in other security or data analysis projects.