Release Notes

Data Replay now includes rule filters and fully supports event threshold settings, enhancing your ability to test whether a detection is behaving as expected.

Added support for programmatically creating, editing, and deleting cloud accounts through the Panther API for Cloud Security Scanning via policies.

In an alert’s “Details” tab in the Panther Console, the event JSON section is now expanded by default.

Added support for MAC address indicators. MAC addresses can now be used in Indicator Search directly or by pivoting from an alert’s details page.

Use our new Rule Filters in the Panther Console to quickly tune existing rules without writing code.

Improved the Overview Dashboard in the Panther Console. The new design gives your team actionable insights to jump into the right workflow, like triaging alerts, engaging with alerting trends, and identifying detections to refine.