Why is my Detection alerting on PANTHERACCOUNTADMIN?

QUESTION

Why is my Detection alerting on a user called PANTHERACCOUNTADMIN?

ANSWER

This happens programmatically when Panther deploys new code and runs migrations or updates. Panther uses that account when any of the ACCOUNTADMIN, SYSADMIN or SECURITYADMIN roles are needed.