INNER CODE UNIT · Python

main

panther-labs/panther-analysis · .scripts/find_zero_match_detections.py:15

def main(csv_path: Path = CSV_PATH) -> None:
    # detection_id -> list of (customer, events, matches, errors)
    detections: dict[str, list[tuple[str, float, float, float]]] = defaultdict(list)

    with open(csv_path, newline="") as f:
        reader = csv.DictReader(f)
        for row in reader:
            detection_id = row["DETECTIONID"]
            customer = row["CUSTOMER_NAME"]

            events_raw = row[
                "SUM:PANTHER.EXPERIMENTAL_DETECTION.EVENTS{BASEDETECTIONVERSION:V3.100.0}.AS_COUNT()"
            ]
            matches_raw = row[
                "SUM:PANTHER.EXPERIMENTAL_DETECTION.MATCHES{BASEDETECTIONVERSION:V3.100.0}.AS_COUNT()"
            ]
            errors_raw = row[
                "SUM:PANTHER.EXPERIMENTAL_DETECTION.ERRORS{BASEDETECTIONVERSION:V3.100.0}.AS_COUNT()"

View source record →