Credential Stuffing to AWS Account Takeover: Panther AI SOC Alert Triage Demo

In this demo, we walk through how Panther's AI SOC agent triages two related alerts across Okta and AWS CloudTrail, automatically connecting a credential stuffing attempt to downstream root account activity to map a complete account takeover in progress.

What you'll see:

-An Okta login alert classified Risky by Panther AI, with credential stuffing attempts identified in the days prior
-AWS root console logins from the same IP, without MFA, over three consecutive days
-A billing contact modification flagged as an account ownership transfer attempt
-How Panther correlates both alerts on a shared IP across two log sources

Learn more about Panther's AI SOC platform at panther.com.

Видео Credential Stuffing to AWS Account Takeover: Panther AI SOC Alert Triage Demo канала Panther