Panther medium deprecated python

Notion Many Pages Deleted [Deprecated]

(Deprecated due to false-positive rate) A Notion User deleted multiple pages.

View Source

Detection Logic

from panther_notion_helpers import notion_alert_context


def rule(event):

    return event.deep_get("event", "type", default="<NO_EVENT_TYPE_FOUND>") == "page.deleted"


def title(event):
    user = event.deep_get("event", "actor", "person", "email", default="<NO_USER_FOUND>")
    return f"Notion User [{user}] deleted multiple pages."


def alert_context(event):
    context = notion_alert_context(event)
    page_id = event.deep_get("event", "details", "target", "page_id", default="<NO_PAGE_ID_FOUND>")
    context["page_id"] = page_id
    return context

Field Validations

Loading…

Comments (0)

Loading comments...