Can I share String Sets across different detections in Panther?

Question

Can I add elements and get elements from the same string set from 2 different detections, and have them 'share' these values?

Answer

Yes, this is possible! The code from one detection will be able to access previously cached data from another detection by using the same key, so that it will be able to interact with the same entry in the key-value table.

To use String Sets so that you can manipulate our built-in caching functionality, you can check our Panther String Sets documentation.