Can I use Python in a Derived Detection in Panther?
QUESTION
Can I use Python in a Derived Detection in Panther?
ANSWER
Logic cannot be overridden using Python in Panther. However, Python-defined values can be overridden if the appropriate override key is used. For instance, using DynamicSeverities
will override the Python severity()
function, but the standard Severity
key will not. The limitations section of our documentation provides examples of some fields.
If you are interested in support of this feature, please contact Panther Support to put in a request.