New and Noteworthy

• Enrich ingested logs with Panther’s STIX/TAXII enrichment.

• Panther's Slack Bot adds an “AI Triage” button to trigger triage on demand and @mention support for follow-up questions in Slack threads.

  • If you’d like to update an existing Slack Bot destination for @mention support, you must update your Slack app manifest.

• Manage Panther Log Forwarder sources as code via the REST API and Terraform provider.

Enhancements

• Updated left navigation brings a flatter structure, with settings and the user menu now built into the sidebar.

• Google Workspace schema expanded with additional Activity types and new Reports API fields.

• Group correlation rules support a WithinTimeFrameMinutes option for CTE-based matching.

Bug Fixes

• Custom relative time now persists on saved searches across reloads.

• Resolved an incorrect "unsaved changes" indicator on saved searches that weren't actually modified.

• The Create New Log Source page now loads faster.

• Fixed scheduled-prompt query timeouts caused by stalled Snowflake result fetches.

Announcements

• Panther does not support Google Pub/Sub sources configured with Exactly-Once Delivery. If this setting is enabled on your source, Pub/Sub source health checks will show as unhealthy and you will be unable to create or update the Pub/Sub source.