Panther medium experimental python

Snowflake Login Without MFA

Detect snowflake logins without multifactor authentication

View Source

Detection Logic

MFA_EXCEPTIONS = {"PANTHER_READONLY", "PANTHER_ADMIN", "PANTHERACCOUNTADMIN"}


def rule(event):
    return event.get("user_name", "") not in MFA_EXCEPTIONS

Field Validations

Loading…

Comments (0)

Loading comments...