deployments/panther_config.yml
file to associate an SNS topic you have created with the Panther CloudWatch alarms to receive notifications. If this value is blank then Panther will associate alarms with the default Panther SNS topic called panther-alarms
:Custom Event Transformer
.RawMessageDelivery: true
when creating the Pager Duty subscription.CloudWatch
from the Services menuDashboards
from the left pane of the CloudWatch consolePantherLogAnalysis
...
of the pane entitled Input MBytes (Uncompressed) by Log Type
and select from the menu View in CloudWatch Insights
Apply
Run Query
https://panther-community-us-east-1.s3.amazonaws.com/{version}/tools/{os}-{arch}-{tool}.zip
, where:{version}
is the version of Panther you have deployed, e.g. v1.27.0
{os}
is one of: darwin
, linux
, or windows
{arch}
is either amd64
or arm64
{tool}
is the name of the tool you need (see next section)-h
flag will explain usage.panther-ops-tools
Lambda function to handle some common ops tasks. Over time, more opstool functionality will move into this functionsnowshare
to copy data into a new accountchecker
tool and auto-applies the recommended actionshttps://panther-community-us-east-1.s3.amazonaws.com/{version}/tools/{architecture}.zip
{version}
is the version of Panther you have deployed, e.g. v1.23.3
{architecture}
is one of the following:darwin-amd64
linux-amd64
linux-arm
windows-amd64
windows-arm