~/talk

Secure the software supply chain w/ detection as code & modern SIEM

Talkat AWS re:Inforce 2023 · 2023-06-13..06-14· [security, devops-and-delivery]
links:none on file
slides:none on file

Panther shows a cloud-first SIEM that applies detection-as-code in Python, running real-time Lambda detections and storing raw logs in Snowflake as a security data lake. GitHub and custom app logs rank surprisingly high, and the platform claims one year retention and 25–50% SIEM cost savings versus legacy vendors. Detections run immediately, trigger automated responses (Slack prompts, scripted password resets, ticketing) and integrate with CI (GitHub Actions) so rules are versioned and rollbacks are quick.

AI-written summary · about

  1. 0:00Introduction
  2. 2:39Dev537
  3. 4:03Kill Chains
  4. 8:28Log Types
  5. 9:47Tradeoffs
  6. 13:20How it works
  7. 13:56Customers
  8. 14:11Outro
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.