global
analysis type.panther
and panther_oss_helpers
. panther
is a default and already set up for you to define your custom logic, and panther_oss_helpers
provides boilerplate helpers to common caching and other use cases.ID
at the top of your analysis function body then call the global as if it were any other python library.Analysis
> Helpers.
deep_get()
can be used to return keys that are nested within the python dictionaries. This function is useful for safely returning nested keys and avoiding an AttributeError
when a key is not present. is_ip_in_network()
is a function to check if an IP address is within a list of IP ranges. This function can be used with a list of known internal networks for added context to the detection.pattern_match()
, pattern_match_list()
can check that a string matches any pattern in a given list.aws_strip_role_session_id()
strips the session ID our of the arn. aws_strip_role_session_id()
would return arn:aws:sts::123456789012:assumed-role/demo