Panther medium deprecated python
Notion Many Pages Deleted [Deprecated]
(Deprecated due to false-positive rate) A Notion User deleted multiple pages.
Detection Logic
from panther_notion_helpers import notion_alert_context
def rule(event):
return event.deep_get("event", "type", default="<NO_EVENT_TYPE_FOUND>") == "page.deleted"
def title(event):
user = event.deep_get("event", "actor", "person", "email", default="<NO_USER_FOUND>")
return f"Notion User [{user}] deleted multiple pages."
def alert_context(event):
context = notion_alert_context(event)
page_id = event.deep_get("event", "details", "target", "page_id", default="<NO_PAGE_ID_FOUND>")
context["page_id"] = page_id
return context Field Validations
Loading…
Comments (0)
Loading comments...