Databricks has completed its acquisition of Panther, bringing Panther’s SOC workflows and detection capabilities together with Lakewatch, Databricks’ open security lakehouse. Together, they are designed to help security teams retain more telemetry, add richer context to investigations, and automate more of the detection and response lifecycle on governed data.
What’s new
- Open security data at scale: Lakewatch brings security, IT, and business data together in open formats, with support for high-volume telemetry and long-term retention.
- Detection as code: Panther adds software-engineering practices to detection, so teams can author, test, version, and deploy detection logic through standard development workflows.
- AI-assisted triage and investigation: Security agents can help enrich alerts, investigate threats, summarize findings, and support faster analyst decisions.
- More ready-to-use integrations: Panther brings more than 100 integrations across cloud platforms, identity systems, SaaS applications, and endpoints to help teams connect security data faster.
- Governance built in: Unity Catalog helps govern security telemetry with access controls, lineage, and auditing, while standards such as OCSF support consistent normalization across data sources.
👉 Read the full post here
