QUESTION

How can I upload specific files using Panther Analysis Tool (PAT)?

ANSWER

You can specify the relative paths of your local directories that contain your files by using the "--path" command in "panther_analysis_tool upload".

If you want to upload specific files instead of the entire directory, you can use the --filter argument with a list of filters specified in the format KEY=VALUE1,VALUE2. The keys can be any valid field in a policy or rule.

Here are some examples of using --filter with RuleID or DisplayName when attempting to upload a specific rule:

• RuleID
  panther_analysis_tool upload --api-token YOUR_API_TOKEN --api-host https://YOUR_API_HOST --path . --filter RuleID="YOUR_RULEID"

• DisplayName
  panther_analysis_tool upload --api-token YOUR_API_TOKEN --api-host https://YOUR_API_HOST --path . --filter DisplayName="YOUR_RULE_DISPLAY_NAME"

You can find more information about --filter in our ­documentation.