Release Notes

Panther's public API, now released in beta, enables customers to use GraphQL queries to interact with the Panther system. Learn more in the documentation.

Added support for Google Cloud Storage as a Data Transport to allow customers to more effectively monitor Google resources.

Lookup Tables allow you to add important context to your detections and alerts for improved investigation workflows. Use Lookup Tables to enhance alerts with metadata and context, such as identity/asset information, vulnerability context, and network maps. (docs)

Pull your audit logs from Atlassian with our new native Atlassian Log Puller integration. (docs)

"Select all in system" option now available in the alert bulk selector to speed up mass alert triaging (docs)

CSV files, in addition to JSON, are now supported when generating or testing schemas in the UI (docs)

Generate a schema in the UI from uploaded sample logs for quicker data onboarding (docs)

New security content that will expand built-in detections, helpers, and data models in Panther (repo)

Users can now drill down into indicator search timeline results for more impactful searches (docs)

Support for CloudWatch Logs as a Data Transport to better monitor AWS resources (docs)