jacknagz
Joined 9 years ago
Karma
145
Submissions
35
Member since
Jul 26
[ my public key: https://keybase.io/jack_naglieri; my proof: https://keybase.io/jack_naglieri/sigs/r48yId11w8D20LMHX4sHf06FwP8xrI79qu0WDNr3M7Q ]
View on Hacker NewsRecent submissions
Comment · 5 years ago
Panther uses Python for real-time log analysis and SQL for analytics over the stored/normalized data.
Comment · 5 years ago
FYI Panther can also integrate to Snowflake as the data backend
Comment · 6 years ago
Nope, that's available in OSS!
Alerts can deliver to SNS/SQS, which can invoke a Lambda function running your custom script:
Comment · 6 years ago
Yes, I was the original core dev of StreamAlert during my time at Airbnb.
I'd say the biggest differences are that Panther:
- Has a UI-driven workflow (vs CLI)
- Has an improved design to be more scalable and cost-effective
- Is written almost entirely in Golang
- Made a larger investment in the Athena side, allowing data pivoting and correlation across types
- Has first-class support for monitoring infrastructure as "resources", opening up more compliance use cases
We applied a lot of lessons learned from running StreamAlert and from my team's experiences at Amazon.
Comment · 6 years ago
Thanks! What type of integrations? On the input or output side?
Comment · 6 years ago
Thank you!! It definitely is the future.
Comment · 6 years ago
For those who had a pre-release of Panther deployed, check out our release notes: https://github.com/panther-labs/panther/releases/tag/v1.0.0
We are also available on Slack to help out!
Comment · 6 years ago
Hey! Thank you :)
Comment · 6 years ago
Thank you! Our goal with Panther is to allow security engineers to customize and scale it to fit their needs.