QUESTION

My panther_analysis_tool test commands are running tests on detections that I don't use, and some of these tests fail noisily. Why am I seeing errors in PAT for rules that are currently disabled?

ANSWER

PAT's test function ignores disabled detections when you use the --skip-disabled-tests option. For more information, run panther_analysis_tool test --help or see our documentation here.