Serverless is a game changer. A few of them were at Airbnb working on SteamAlert which is when I met them and Panther takes lots of lessons learned and makes for a very dev friendly SIEM. We commit little python snippets to git along with a yaml file for the alert config and its ready to go.