Securing the software supply chain with detection as code
summary
Panther claims to be a cloud-native SIEM that implements Detection-as-Code so detections live in version control and CI/CD, ingesting GitHub, CloudTrail, S3, EC2, GuardDuty and custom app logs and storing one year of hot searchable data in a security data lake (Snowflake). The talk maps real attacks (Lazarus, LAPSUS$, oSpray password spraying to Okta admin compromise → API keys → malicious GitHub commits → AWS pivot) and shows Panther sending real‑time alerts at petabyte scale to ticketing, SOAR, or webhooks with zero‑ops serverless operation.
AI-written summary · about
chapters (6)
- 0:00Introduction and agenda
- 1:06Software supply chain risks
- 3:57Analyzing threat tactics
- 5:21Security monitoring strategies
- 15:22Panther platform overview
- 17:21Benefits and conclusion
related talks
14mSecure the software supply chain w/ detection as code & modern SIEM
49mPrepare for the unexpected with code-to-cloud security
43mThreat hunting in the cloud
17mPantheon – Cloud-Native Security Monitoring build from the trenches
21mRecognizing and avoiding cloud security survival mode
46mApplication security from start to finish
01h 02mSecuring data and democratizing the alert landscape
15mThe origin of security challenges & a revolutionary solution