How to make Panther Analysis Tool upload faster
QUESTION
How do I make panther_analysis_tool upload
operations faster? Even when uploading a small amount of content, the upload is slow and takes a long time.
ANSWER
Here are some things that can help reduce the time spent waiting for panther_analysis_tool (PAT) to complete:
- Exclude saved queries from the upload. Currently Panther saves these one at a time on the backend.
- If what you're doing is updating detection code, use PAT
test
andvalidate
. This way, when you merge a branch tomain
in GitHub Actions or your preferred CI/CD system, the upload command runs in the background.