This repository was archived by the owner on Sep 16, 2026. It is now read-only.

Commits

History for

Commits on May 22, 2025

Merge branch 'develop' of https://github.com/TachTech-Engineering/panther-siem into develop
maxehio
committed
b87fd92
make fmt
maxehio
committed
ea6e256
Update gsuite_suspicious_logins.py
maxehio
authored
1f42035

Commits on May 21, 2025

Made improvements to rule to catch login success events flagged as suspicious
maxehio
committed
0ec6314

Commits on May 12, 2025

A user-defined function to check the client's whitelisted IP address for impossible travel rule (#1601)
mustafa-intrusionops
authored
f182009

Commits on May 8, 2025

Fiixing list conversion in AWS.CloudTrail.EventSelectorsDisabled (#1583)

th-intrusionops
and
arielkr256
authored
f1c5353
Okta VPN Login Title Enhancement (#1608)
pageinsec
authored
f3106fd
THREAT-500: Tuning Adjustments (#1618)
ben-githubs
authored
faabeb7

Commits on May 7, 2025

Changes to some caching rules for time-based caching (#1619)
ben-githubs
authored
a77cc6c

Commits on Apr 29, 2025

Update aws_unauthorized_api_call.py by adding p_log_type (#1610)
akozlovets098
authored
eabf1e5

Commits on Apr 25, 2025

THREAT-431 Update AWS rules to use new `get_actor_user` udm (#1602)
akozlovets098
authored
ff52f2b

Commits on Apr 23, 2025

Google.Workspace.ManyDocsDownloaded: Convert to Signal (#1606)
ben-githubs
authored
5ffb717

Commits on Apr 22, 2025

Commits on Apr 16, 2025

Adjust AWS Potential Backdoor Lambda Function title (#1598)
pageinsec
authored
8d39fa3
Unusual EC2 launch logic fixup (#1580)
pageinsec
authored
3b471fa
Google.Workspace.ManyDocsDownloaded: Fix typos and move to beta status (#1595)
ben-githubs
authored
40ff4b5
Beta rules (#1593)
arielkr256
authored
99a99c9
Cloudflare.Firewall.L7DDoS: Remove deduplication (#1589)
ben-githubs
authored
b44647a

Commits on Apr 14, 2025

THREAT 454: add rule: Orca.Passthrough (#1540)

authored
81e9776
Add dedup to GCP.Destructive.Queries (#1584)
akozlovets098
authored
d21b4a0

Commits on Apr 11, 2025

update comp keys rule (#1571)

authored
1071667
[fix] ASK-1780 Snowflake. DataTransferHistory rule using non-existent field (#1582)
akozlovets098
authored
6632c0e
THREAT-481 GCP K8s tuning (#1568)
akozlovets098
authored
51af89d

Commits on Apr 4, 2025

THREAT-482 Azure Risk passthrough tuning (#1563)

akozlovets098
and
ben-githubs
authored
bd43a13
ASK 1695 - GSuite Docs Download Row Too Long (#1556)

ben-githubs
and
panther-bot-automation
authored
d26a2d0
fix: turn Lambda Update alerts into signals (#1575)
le4ker
authored
20ff37f

Commits on Apr 1, 2025

Commits on Mar 31, 2025

Github.Repo.VulnerabilityDismissed: Remove duplicate unit test (#1569)
ben-githubs
authored
a2abdcf

Commits on Mar 27, 2025

AWS VPC Endpoint Rules (#1553)

authored
c33e035

Commits on Mar 26, 2025