Panther

Panther is a cloud-native Security Information and Event Management (SIEM) platform that eliminates the pain of traditional SIEM with detection-as-code, a powerful security data lake, and elastic scalability. It's designed to help modern security teams ingest and analyze all their security data efficiently at the lowest cost, while cutting noise and improving threat detection accuracy.

Panther lets you detect threats in real-time, using detection-as-code to customize and manage complex threat detection rules. Its high-performance data lake lets you quickly search across massive amounts of security data, so you can quickly investigate and respond to potential security incidents.

Some of the key features include:

• Detection-as-Code: Write custom or create detections in Python or YAML and manage them in Git.
• Multi-Event Correlation: Link multiple security events into a single alert to cut down on noise and alert fatigue.
• Real-Time Alerts: Respond to high-risk events or behaviors as soon as they happen.
• Alert Triage and Response Automation: Send alerts to any destination, including Splunk, or script automated responses.
• Security Data Lake with 100% Hot Storage: Cut costs and boost query performance with a cloud-native security data lake.
• Unified Data Lake Search: Search across all log types for a unified view of incidents or to hunt threats.

Panther is built to support a wide range of use cases, including:

• Data Exfiltration: Detect large data transfer or unusual data access patterns.
• Insider Threats: Detect unauthorized access to sensitive data or unusual data transfer patterns.
• Privilege Escalation: Detect signs of credential misuse or unauthorized access to sensitive resources.
• Anomalous Activity Detection: Detect deviations from a baseline of expected normal behavior.
• Advanced Persistent Threats (APTs): Use complex correlation rules and heuristic analysis to detect low-and-slow attack patterns.

Panther's serverless design means it scales automatically with your team, eliminating infrastructure overhead and lowering your total cost of ownership.

To learn more and schedule a demo, check out their website.

Published on July 12, 2024