Can Panther filter detections based on enrichment data?

QUESTION

Does Panther support adding detection filters which analyze enrichment fields (p_enrichment)?

ANSWER

Panther does not support filtering based on enrichment. If you are interested in support of this feature, please contact Panther Support to put in a request.

As a workaround, you can alter the code of the detection itself. See here for more info on using enrichment data in your detections.