Faster Triaging with Slack Bot Boomerangs
To make gathering relevant context around alerts more seamless, Panther is introducing Slack Bot Boomerangs, which allows security teams to send interactive messages right from an alert thread in Slack.
Method to the Madness: Developing a Detection Engineering Methodology
When writing detections, it is essential to develop a methodology that incorporates threat modeling, input from security incidents, threat intelligence, threat hunting, and red/purple team activities.
Writing Your First Python Detection in 30 Minutes with Okta and Panther
This post will walk you through how to ingest data and set up a detection for Okta in under 30 minutes using a language you probably already know – Python.
Top 5 AWS Services to Protect with CloudTrail
Learn how to leverage CloudTrail logs to protect your AWS services from S3 to CloudFormation.
Zero False Positives from your SIEM
The downfall of SIEMs are high volumes of false positive alerts. Let’s discuss techniques to drive false positives down and keep them down.
Accelerate Response with the Panther Slack Bot
Panther's new Slack Bot feature enables a much more seamless alert triage, assignment, and collaboration process – accelerating detection & response and reducing MTTR.
Threat Hunting in AWS
In this article, we review how to hunt for threats in your AWS environment with AWS CloudTrail and VPC logs.
Optimize CloudTrail Ingestion with Modern SIEM
Learn how Modern SIEMs scale with your AWS usage and CloudTrail volume allowing growth without sacrificing visibility.