Overview

Documentation overview highlighting key features and benefits of Panther's cloud-native threat detection platform

Panther is a cloud-native SIEM featuring detections-as-code and advanced search, with a number of natively supported log sources and alert destinations. Ingest terabytes of security events per day into a structured data lake in Panther to power real-time detections and investigations.

Explore Panther features

Start using Panther

---

Quick Start

Onboarding Guide

Data ingestion

---

Supported Log Sources

Custom Log Sources

Ingestion Filters

Detections

---

Simple Detections

Python Detections

Derived Detections

Panther-managed Detections

Alerts

---

Alert Destinations

Assigning and Managing Alerts

Investigations

---

Search

Standard Fields

Saved & Scheduled Searches

Data enrichment

---

Custom Lookup Tables

Identity Provider Profiles

Enrichment Providers

Developer tools

---

Panther API

Panther Analysis Tool

CI/CD for Panther Content

Converting Sigma Rules

Get started

• Want to learn more about Panther? Visit our website.

• Interested in a demo? Fill out this form.

• Have a brand-new Panther account? Check out Quick Start.

• Ready to start detecting threats? Follow the Onboarding Guide.