Skip to content

@panther-labs Panther Labs

Change the repository type filter

All

    Repositories list

    25 repositories

    • panther-analysis

      Public
      Built-in Panther detection rules and policies
      pythonsecuritycybersecuritysiem
      Python
      •
      Apache License 2.0
      •193•431•0•4•Updated Dec 24, 2025Dec 24, 2025

    • mcp-panther

      Public
      Write detections, investigate alerts, and query logs from your favorite AI agents
      aicybersecuritysecurity-operationsmcp-server
      Python
      •
      Apache License 2.0
      •14•36•7•2•Updated Dec 23, 2025Dec 23, 2025

    • panther-auxiliary

      Public
      Infrastructure as code for deploying Panther
      HCL
      •
      Apache License 2.0
      •1•2•0•2•Updated Dec 23, 2025Dec 23, 2025

    • panther-cli

      Public
      A collection of tools for Panther deployments written in Go.
      Go
      •
      Apache License 2.0
      •0•1•0•5•Updated Dec 23, 2025Dec 23, 2025

    • panther_analysis_tool

      Public
      Command line tool for working with Panther rules and policies
      pythonsecurity
      Python
      •
      Other
      •28•47•2•5•Updated Dec 19, 2025Dec 19, 2025

    • pypanther

      Public
      A Pythonic Detection Rules Framework
      securitymonitoringincident-responseinfosecpantherdetection-engineeringdetection-as-code
      Python
      •
      Apache License 2.0
      •2•12•0•9•Updated Dec 19, 2025Dec 19, 2025

    • pySigma-backend-panther

      Public
      pySigma Panther Backend
      pythonsecurity
      Python
      •
      Apache License 2.0
      •0•8•0•5•Updated Dec 15, 2025Dec 15, 2025

    • terraform-provider-panther

      Public
      Terraform provider for Panther resources
      terraform
      Go
      •
      Apache License 2.0
      •4•6•0•5•Updated Dec 10, 2025Dec 10, 2025

    • pypanther-starter-kit

      Public
      A Python-native Detection as Code Framework
      securitycloudmonitoringincident-responseinfosecdetection-engineeringdetection-as-code
      Python
      •
      Apache License 2.0
      •5•17•0•6•Updated Dec 6, 2025Dec 6, 2025

    • grimoire

      Public
      Generate datasets of cloud audit logs for common attacks
      Go
      •
      Apache License 2.0
      •22•0•0•3•Updated Dec 5, 2025Dec 5, 2025

    • panther_detection_helpers

      Public
      Helpers for writing Panther detections
      pythonsecurity
      Python
      •
      Other
      •0•0•0•4•Updated Dec 2, 2025Dec 2, 2025

    • stratus-red-team

      Public
      ☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud
      Go
      •
      Apache License 2.0
      •276•0•0•7•Updated Nov 20, 2025Nov 20, 2025

    • opensearch-go

      Public
      OpenSearch Go Client (Panther Fork)
      Go
      •
      Apache License 2.0
      •0•0•0•8•Updated Nov 19, 2025Nov 19, 2025

    • homebrew-taps

      Public
      Homebrew Taps for Panther Tooling
      Ruby
      •
      Apache License 2.0
      •0•0•0•0•Updated Nov 13, 2025Nov 13, 2025

    • parquet-go

      Public
      Go package to read and write parquet files. parquet is a file format to store nested data structures in a flat columnar data format. It can be used in the Hadoop ecosystem and with tools such as Presto and AWS Athena.
      Go
      •
      Apache License 2.0
      •54•0•0•0•Updated Nov 5, 2025Nov 5, 2025

    • gofalcon

      Public
      Golang-based SDK to CrowdStrike's APIs
      Go
      •
      MIT License
      •56•0•0•0•Updated Apr 29, 2025Apr 29, 2025

    • password-rotation-lambda

      Public
      Password rotation function for AWS Lambda and Secrets Manager
      Go
      •
      Apache License 2.0
      •4•0•0•0•Updated Nov 4, 2024Nov 4, 2024

    • fastjson

      Public
      Fast JSON parser and validator for Go. No custom structs, no code generation, no reflection
      Go
      •
      MIT License
      •149•1•0•0•Updated Oct 24, 2024Oct 24, 2024

    • peg

      Public
      Fork of pointlander/peg
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •0•1•0•0•Updated Sep 13, 2024Sep 13, 2024

    • avro

      Public
      A fast Go Avro codec
      Go
      •
      MIT License
      •123•0•0•0•Updated Jul 17, 2024Jul 17, 2024

    • panther-detections-legacy

      Public archive
      [DEPRECATED] Built-in Panther detection rules and policies
      pythonsecurity
      Python
      •
      GNU Affero General Public License v3.0
      •1•0•0•3•Updated Jun 16, 2023Jun 16, 2023

    • stix2

      Public
      Pure go implementation of stix2
      golangsecurity
      Go
      •
      BSD 2-Clause "Simplified" License
      •2•5•0•0•Updated Jun 16, 2023Jun 16, 2023

    • tutorials

      Public
      Cloud security tutorials and best practices
      awssecuritycloud
      Makefile
      •
      Apache License 2.0
      •15•38•0•0•Updated Mar 20, 2023Mar 20, 2023

    • pounce

      Public archive
      [DEPRECATED] 🐯 Composable react primitives for building UI dashboards
      TypeScript
      •
      Apache License 2.0
      •8•21•0•0•Updated Jan 17, 2023Jan 17, 2023

    • asana-ticket-router

      Public archive
      [DEPRECATED] Moving away from hosted-ops repo to store software packages
      0•0•0•0•Updated Dec 7, 2022Dec 7, 2022