Show HN: Panther v1.0 – Open Source, Cloud-Native SIEM

Re:Show HN: Panther v1.0 – Open Source, Cloud-Native SIEM by tunk on Wednesday March 25, 2020 @06:52PM (#22689218)

Is this a spinoff of StreamAlert? Any differences between the 2?

[ Parent | on HN ]

Re:Show HN: Panther v1.0 – Open Source, Cloud-Native SIEM by jacknagz on Wednesday March 25, 2020 @07:19PM (#22689355)

Yes, I was the original core dev of StreamAlert during my time at Airbnb.

I'd say the biggest differences are that Panther:

- Has a UI-driven workflow (vs CLI)

- Has an improved design to be more scalable and cost-effective

- Is written almost entirely in Golang

- Made a larger investment in the Athena side, allowing data pivoting and correlation across types

- Has first-class support for monitoring infrastructure as "resources", opening up more compliance use cases

We applied a lot of lessons learned from running StreamAlert and from my team's experiences at Amazon.

[ Parent | on HN ]

Re:Show HN: Panther v1.0 – Open Source, Cloud-Native SIEM by tunk on Thursday March 26, 2020 @12:14AM (#22690745)

Thank you!

[ Parent | on HN ]