Skip to main content
Panther Knowledge Base

How to combine custom information with a lookup table in Panther

  1. Last updated
  2. Save as PDF

QUESTION

I have a list of IP addresses in a .CSV file, and I want to get autonomous system number (ASN) info from Panther for these IP addresses. Can I query the IP ASN info and add it to the CSV for use in Panther detections?

ANSWER

To use these two info sources together, you can join the info in Panther's data lake, following our guide here. You can import your data as a lookup table, then combine the information using a SQL join.

Another option is to use a common table expression (CTE) to combine the information in Panther's Data Explorer.