How do I override my Panther detection's default severity?
Last updated: September 3, 2024
QUESTION
How do I use Python code to override my rule's default severity?
ANSWER
You can override your Detection's default severity, as defined in the metadata, using the severity() method in the Python code. This will take precedence over your default severity. Here's an example rule for reference.