QUESTION

How do I add a Python library that is not natively available in Panther into my detection runtime environment?

ANSWER

The answer depends on the type of Panther deployment you have. Please note that these steps will only add the package to the runtime used within Panther; if you write detections locally with PAT, those detections will not have access to the new library.

SaaS and Cloud-Connected

Please file a support ticket to have a custom set of libraries or layer applied to your hosted instance of Panther.

Self-Hosted

Please see the instructions in Panther's System Configuration > Runtime Environment documentation on how you can add it yourself.