QUESTION

Why aren't the changes I applied to Global Helpers showing up in Panther? I pushed a change yesterday, but it's been a day and the changes haven't been reflected.

ANSWER

There may be a few minutes of delay, but a full day is not expected. If you've made changes to your Global Helpers in Panther but they're not reflecting in the console, it's likely that the upload process didn't complete successfully. This can happen due to various reasons, such as a failed panther_analysis_tool upload command or issues with your CI/CD pipeline.

Verifying Helper Updates

To check if your Global Helper changes have been applied:

1. Go to the Panther Console

2. Navigate to Detections -> Helpers

3. Locate the specific Helper you modified

4. Check the "Last Updated" timestamp and the content of the Helper

If the timestamp is old or the content hasn't changed, it likely indicates that the upload did not work and your recent updates weren't successfully uploaded.

Troubleshooting Steps

1. Check CI/CD Logs: Review the logs of your CI/CD job that handles the deployments. Look for any error messages or indications that the upload process failed. Alternatively, it's possible that the upload is succeeding but being filtered somehow to not uploading those helpers.

2. Verify PAT Command: Ensure that the panther_analysis_tool upload command is being executed correctly in your deployment process.