v1.71

In Closed Beta

If you would like to participate in either of the following closed betas, contact your Panther representative.

• Onboard Netskope audit logs with the new Netskope log puller. Use this integration to monitor events within your Netskope instance.
• Added one-way comment syncing to the Jira alert destination. When enabled, comments posted on a Panther alert in the Panther Console or via the Panther API are also posted on the corresponding Jira issue.

Enhancements

• Added a new enrichment field, p_match, which is now injected into the data of each matching row within p_enrichment, facilitating the use of enrichment inside detections.
• Changed the beginning of the week from Monday to Sunday for date range picker calendars.

Panther Developer Workflows

• Version 3.7.6 of panther-analysis has been released, featuring the following updates:
  • You can now easily configure Visual Studio Code to work with the panther-analysis repo. This allows you to take advantage of features such as resolving modules imported from ./global_helpers and running panther_analysis_tool test through the Python debugger. See our README on GitHub for more information.
  • Updated the Standard.ImpossibleTravel.Login detection. 
  • Deprecated the AWS DynamoDB Table Encryption policy.