Panther Analysis Tool (PAT)

"Exhausted retries attempting to perform bulk upload" when trying to upload detections via PAT

›

502 responses when uploading with Github Actions and PAT

›

Can I use rule filters when using CI/CD to upload to Panther?

›

Can't attach new custom schema to a log source after uploading via the panther_analysis_tool

›

Detections with same name failed to upload to backend when using Panther Analysis Tool

›

Do CI/CD processes affect rule filters for Panther detections?

›

Does Panther Analysis Tool offer an option to output JSON describing the results of an upload?

›

Error "AttributeError: 'PathDistribution' object has no attribute '_normalized_name'" when installing or updating PAT

›

Error message "not in list of valid keys" when running tests with PAT

›

Error message "rule has an invalid log type" when uploading to Panther

›

Error: "No backend client provided, skipping InlineFilters during testing" when testing Panther detections with PAT

›

Error: "PantherEvent has no attribute 'deep_walk'" when testing Panther detections with PAT

›

Error: Panther Analysis Tool cannot save an enabled policy with failing unit tests

›

Getting 502 Bad Gateway at my API host when enabling CI/CD in GitHub Actions for Panther

›

How are global helpers included with Panther Analysis Tool uploads?

›

How can I avoid overwriting global helpers while using PAT?

›

How can I resolve the error "None should be instance of 'dict'" in panther analysis tool?

›

How can I run the Panther Analysis Tool on Windows?

›

How do I read the code for panther_detection_helpers?

›

How do I resolve "AnalysisContainsDuplicatesException" when uploading a rule to Panther?

›

How do I resolve "attempted to add item for FileName multiple times" when uploading with PAT?

›

How do I resolve "resolve body reference: could not find uploaded item" while using PAT to upload detections?

›

How do I resolve a "Panther cannot import X helper file" error?

›

How do I resolve the error "ImportError: cannot import name 'Final' from 'typing' (/usr/local/lib/python3.7/typing.py)" when using Panther Analysis Tool?

›

How do I resolve the error "LOG_TYPE_REGEX does not match 'Snyk.*'" in Panther Analysis Tool?

›

How do I resolve the PAT error "Missing key: 'AnalysisType'"?

›

How do I resolve the PAT error "name 'Optional' is not defined"?

›

How do I troubleshoot panther_analysis_tool installation issues on macOS?

›

How long does it take to see my detection update in Panther once the GitHub Action is completed in my CI/CD workflow?

›

How to fix "TypeError: 'type' object is not subscriptable" when uploading to my Panther repo

›

How to ignore non-Panther files when using panther-analysis-tool

›

How to make Panther Analysis Tool tests ignore disabled detections

›

How to make Panther Analysis Tool upload faster

›

How to resolve "cannot access local variable 'yaml'" error in Panther Analysis Tool

›

How to Resolve the "NoRegionError: You Must Specify a Region" Error in Panther

›

How to resolve the error "AccessDeniedException" for Panther federated roles when used with PAT

›

How can I test just one detection with Panther Analysis Tool?

›

Is there a limit to how many detections can be deleted at once with PAT?

›

Panther Analysis Tool error when uploading tests: cannot unmarshal map or seq into string

›

Panther Analysis Tool reports an AnalysisIDConflictException

›

Panther error: cannot install panther_analysis_tool because package versions have conflicting dependencies

›

Running tests and uploading only the modified files from the previous commit when working with the Panther Analysis Tool

›

Saved queries appear in Panther Console after local deletion

›

Upload specific files using Panther Analysis Tool (PAT)

›

What API permission do I need for running commands with PAT?

›

What do I do if GitHub workflow tests via PAT are failing due to a missing library?

›

What does the pipe character do in GitHub Actions workflows used with Panther?

›

What happens to my detection code if I make changes in both the Panther Console and PAT?

›

When trying to install Panther Analysis Tool I encounter the following error: "AttributeError: module 'lib' has no attribute 'OpenSSL_add_all_algorithms'"

›

Why am I getting "pyenv: pipenv: command not found" when installing PAT?

›

Why am I getting timestamp errors from PAT test?

›

Why do duplicate rules appear in Panther after renaming a rule and how can I delete the old one?

›

Why do I see 'access denied' when trying to upload via Panther Analysis Tool?

›

Why does my bulk upload pass the PAT test command, but still fails to upload?

›

Why does my PAT query upload fail with the message "No SQL supplied"?

›

Why is PAT showing the error "LOG_TYPE_REGEX does not match '...'" or "LOG_TYPE_REGEX(\\.[A-Z][A-Za-z0-9]*){0,5})$')) did not validate 'Github.Audit'"?

›

I received a "Validation failed" error when running Panther’s PAT validate command. How can I troubleshoot this?

›

Error 'could not find uploaded item: scheduled_rule_default.py' when uploading rules via Panther Analysis Tool (PAT) in Panther

›

Why does the lastModified timestamp for Panther rules change after CI/CD updates?

›

Why am I getting a 403 or 401 error when uploading content using Panther Analysis Tool (PAT)?

›

Does Panther Analysis Tool test if the destinations of a detection are valid?

›

Does a scheduled query deployed from Git overwrite an existing one with the same name from the Panther Console?

›

Error "argument --api-host: expected one argument" when running Panther test command in GitHub Actions

›

How can I verify if the Panther Analysis Tool (PAT) is using the .env variables?

›

Why do schema updates with Panther Analysis Tool (PAT) fail when using test files?

›

Can I run a single test in a single detection with Panther Analysis Tool (PAT)?

›

Error: "Object 'PANTHER_LOGS.*' does not exist or not authorized." in Panther. How can I solve it?

›

How do I remove accidentally uploaded queries using Panther Analysis Tool (PAT)?

›

Who is listed as the detection creator when using the Panther Analysis Tool vs the console?

›

Why didn't my GitHub Actions workflow apply changes when I changed a rule status from Enabled: true to Enabled: false in the rule YAML file in my panther-analysis repo?

›

Can I ignore multiple files using the Panther Analysis Tool (PAT) --ignore-files flag?

›

Error: 'git rev-parse --show-toplevel returned non-zero exit status 128' when running 'pat init' in the Panther Analysis Tool (PAT)

›

What is the configuration precedence for Panther Analysis Tool (PAT) and will .panther_settings.yml override options passed via the command line?

›

PAT shows "Failed to parse query / Skipping table name validation" in Panther

›