Do summary attributes get stored in the panther_rule_matches database view in Panther?
Last updated: September 3, 2024
QUESTION
Do summary attributes get stored in the panther_rule_matches database view in Panther?
ANSWER
No. Currently, the summaries in the Panther Console are populated by taking the summary attributes in the detection rules and dynamically querying Snowflake. The results of the summaries are not stored anywhere at this time.