This repository was archived by the owner on Sep 16, 2026. It is now read-only.

Commits

History for

Commits on Mar 18, 2025

THREAT-421: Stratus AWS SSM Detections (#1525)

authored
8b5f36f

Commits on Feb 10, 2025

[Tuning] VPC Healthy Log Status (#1511)
arielkr256
authored
12385e2

Commits on Dec 9, 2024

Introduce data model unit tests (#1443)
arielkr256
authored
5f0db64

Commits on Dec 5, 2024

Add get_user to AWS datamodel (#1441)
arielkr256
authored
1fd2f09

Commits on Nov 13, 2024

THREAT-318: Standard.SignInFromRogueState (#1426)

ben-githubs
and
arielkr256
authored
3ced396

Commits on Oct 17, 2024

Helper reorg (#1380)
arielkr256
authored
35c748a

Commits on Sep 9, 2024

Added get_actor_user method to GCP.AuditLog data model (#1343)
biancafu-panther
authored
dfa4abf

Commits on Jun 27, 2024

OCSF data model, VPC/DNS (#1214)

committed
f715e86

Commits on Apr 2, 2024

format YAML and Markdown files (#1174)

le4ker
authored and
Evan Gibler
committed
53a2577

Commits on Mar 19, 2024

Prepare for `3.46.0` (#1156)

authored
5fb9be9

Commits on Feb 29, 2024

updates source_ip in crowdstrike datamodel to aip (#1127)

arielkr256
and
Evan Gibler
authored
8cd9ff5

Commits on Feb 27, 2024

Kubernetes data models (#1120)

arielkr256
and
Evan Gibler
authored
6768251

Commits on Feb 13, 2024

[sync] GitHub Data Model Admin Actions update (#79) (#1104)

Evan Gibler
and
arielkr256
authored
e60b7c7

Commits on Nov 29, 2023

Update GitHub Data Model to display admin-add events instead of UNKNOWN_ROLE (#979)
Evan Gibler
authored
0bd9fa8

Commits on Nov 6, 2023

ID to Name path change zendesk_data_model.yml (#929)

JPhenglavong
and
arielkr256
authored
1d6f4fb

Commits on Oct 13, 2023

New Notion Detections (#896)

ben-githubs
and
darwayne
authored
5e378ad
using caching module in detections instead of globals (#888)

maxrichie5
and
maxrichie5
authored
47cd166

Commits on Sep 19, 2023

Migrate Azure.SignIn rules to Azure.Audit (#876)
papanikge
authored
aca4f01

Commits on Jul 25, 2023

feat: support for azuresignin log types, update panther_analysis_tool (#856)
Ed⁦
authored
44c7741

Commits on Jul 19, 2023

fix: CrowdStrike base64 rule fails for some event types (#850)

ben-githubs
and
Ed⁦
authored
1e4e940

Commits on Jun 26, 2023

fix: when Panther users are modified via SCIM, alert is INFO level (#835)
Ed⁦
authored
4c0cf91

Commits on Jun 22, 2023

feat: Standard.ImpossibleTravel.Login now using p_match via LookupTableMatches (#828)

Ed⁦
and
andrea-youwakim
authored
3ecca4a

Commits on Jun 2, 2023

feat: extend the Standard.ImpossibleTravel.Login detection to include Okta.SystemLog logtype (#770)
Ed⁦
authored
2d9059d

Commits on Jun 1, 2023

feat: a generic approach to impossible travel for login style events (#766)
Ed⁦
authored
b7f8e2f

Commits on May 10, 2023

Crowdstrike FDR (#745)
jzandona
authored
2ffc054

Commits on May 1, 2023

Crowdstrike embargoed (#743)
jzandona
authored
5c303fa

Commits on Apr 6, 2023

Double quote names and IDs the way that bulk download does (#724)
dekatzenel
authored
87306b7

Commits on Jan 25, 2023

fix: There was a bug in Standard.MFADisabled where okta users resetting MFA factors(s) were getting marked as MFA Disabled (#651)
Ed⁦
authored
b61db1e

Commits on Dec 12, 2022

Fix Spelling Errors (#580)
jpl5280
authored
b8f2c22

Commits on Sep 8, 2022

Remove pat imports (#487)

lindsey-w
and
lindsey-w
authored
738972b

Commits on Aug 31, 2022

feat: require compliance with the black python code formatter to pass lint checks (#481)
k-bailey
authored
5cc4287

Commits on Aug 29, 2022

fix: update GCP data model to correctly identify users and roles for role assignment events (#480)
Jeffreyhung
authored
bcb4026

Commits on Aug 10, 2022

feat: cyclomatic complexity linting (#474)
edyesed
authored
ba559fb

Commits on Jul 28, 2022

Slack Data Models & Alert Context Helper (#458)
wey-chiang
authored
3b552f5

Commits on Jun 27, 2022

CloudFlare Detections (#437)
wey-chiang
authored
711784d