How do I find the detections that are generating the most alerts or occurring most frequently in Panther?
QUESTION
How do I find the detections that are generating the most alerts or occurring most frequently in Panther?
ANSWER
You have several options to access this information:
- Through the "Alerts by Detection" visualization in the Panther Console Dashboard.
- Via the Panther API.
- Using SQL to query the Data Lake with Data Explorer.