New and Noteworthy

• Infrastructure Cost Dashboard that tracks Panther usage and billing trends.

Enhancements

• Normalized event filters can filter events using Panther-enriched fields.

• Scheduled lookups support Databricks-backed queries.

• Search results table lets users hide and restore the static Time, Database, and Event columns.

Panther Developer Workflows

• The panther-analysis repository has published updates including:

  • Fixed a clause-ordering bug in the Kubernetes IOC detection query.

  • Fixed the SentinelOne Alert Passthrough detection's ActivityType field type.

Bug Fixes

• Fixed a crash on the console's "Service Unavailable" page shown during first setup.

• Fixed boolean fields in simple detections being evaluated as strings.