New and Noteworthy

• Connect a GitHub repository to Panther so that edits to rules, scheduled rules, policies, and simple detections made in the Panther Console open a pull request in the configured repository.

• AI-powered replay generates targeted SQL queries against the data lake to preview rule outcomes against real data before enabling

Enhancements

• Filters now render quotation marks to indicate whitespace in filter values.

Bug Fixes

• MCP token expiry now returns a 400 error.

• Removed line numbers from PantherFlow errors not associated with a specific line.

• Resolved an issue where AI SQL query cancellation failed for users with RBAC enabled.

• Fixed an issue where the Create Replay button remained disabled after all required inputs were populated.

• Improved Zendesk puller error handling for 429 responses and prevented false alerts from log source periodic health checks.

Now Generally Available

• Ingest the following logs with Panther's log source integrations:

  • AWS NLB logs

  • Axonius logs

  • Hex logs

  • Iru logs

  • OpenAI audit logs

  • Upwind logs

  • Vercel logs

  • Wiz logs via webhook

• Enrich incoming logs with additional context with:

  • GreyNoise enrichment

  • Open Threat Exchange (OTX) enrichment

• Deliver Panther alerts with the Expel alert destination integration.

• Manage the following log sources programmatically through Panther API:

  • GCS sources

  • Pub/Sub sources

  • S3 sources

• Manage Google Cloud Pub/Sub and Google Cloud Storage (GCS) log sources with Terraform

Announcements

• In a future Panther release, customers with Panther AI enabled will be routed to the Panther AI chat as their default landing page.