v1.103

New and Noteworthy

• Send alerts to Discord using our new built-in alert destination integration.
• Leverage our new REST API playground in the Panther Console to test out APIs, validate API keys, and examine return values.
• All beta REST API endpoints and query parameters that previously contained _ have been updated to use - instead.
  • The impacted endpoints are as follows:
    • data models: data_models is now data-models
    • simple rules: simple_rules is now simple-rules
    • scheduled rules: scheduled_rules is now scheduled-rules
  • Configurations that used the previous versions of these endpoints will no longer function as anticipated. Please update your API integrations if you utilize these endpoints.

Enhancements

• Incorporated the following improvements to Detection Packs in the Panther Console:
  • Pack updates will now utilize Notifications to communicate status of a pack update.
  • Added a confirmation modal when attempting to disable a Pack. 
• The behavior of “contains” in Simple Detections and filters has been updated to support partial matches on strings when the filter includes *. 

Panther Developer Workflows

• panther-analysis version 3.45.0 was released. It rolls back a change that created the simple_rules directory, among other fixes and adjustments.
• panther_analysis_tool version 0.42.0 was released, featuring a minor update.

Bug Fixes

• Pack versions now show the accurate version in the dropdown.
• Updated Data Replay to more accurately state when no objects are found.