Skip to main content

User Groups
Events

Create topic
Login

Community Learning! 4 Webinars and 3 Workshops. Register Now!

2 days ago

Welcome to the Google Cloud Security Community!

Got a question? Need an answer? Let's connect!

Security Forums

Q&A, discussions, share, network

Resource Center

Your learning hub for all things security

User Groups

Join a local meetup!

Events

Discover, RSVP, connect

Featured Blogs

You wont want to miss these articles

Better Together: Integrating Wiz Defend and Google SecOps

Ready for the ultimate cloud security synergy? The integration of Google SecOps and Wiz Defend is here to elevate your security game. This powerful co...

Forum|Forum|7 days ago

4525

Scaling Collective Defense: Introducing GitHub Support for Google SecOps Parsers

Author:Idan Patelsky, GCP Cloud Security Steward The ChallengeHistorically, managing parsers in Google Security Operations was a highly centralized an...

Forum|Forum|18 days ago

3080

Beyond Chat: Building an Autonomous SOC Analyst with Claude and the Google MCP

This blog post was written by guest author, Eliraz Oved. If you spend your days in the trenches of a Security Operations Center, you already know the...

Forum|Forum|3 months ago

417311

Recent activity
Help others
Categories

handmyth_sellerNew Member

Google Security Operations

Account suspended due to unexpected Translation API charges — appeal submitted, seeking guidance

Hi Google Cloud Security Community, My Google Cloud Platform account has been suspended since May 29, 2026, and I am looking for guidance on how to get it reinstated. I have already submitted an appeal through the Google Account restrictions page, an

jstonerCommunity Manager

New to Google SecOps: Additional Methods to Filter in Dashboards

It’s been a while since we discussed dashboards in Google Security Operations (SecOps), so today we are going to revisit dashboards with an eye towards applying some additional filters to charts. We’ve previously discussed some basic filtering using

GinoLNew Member

Fraud Defense (reCAPTCHA)

Sudden spike of false-positive UNEXPECTED_ENVIRONMENT / low scores (0.1–0.3) for legitimate Chrome 150 desktop users since Jul 17

Hi Fraud Defense team, Starting 2026-07-17 (zero occurrences before that date), legitimate desktopChrome 150 users on our site began receiving very low reCAPTCHA Enterprisescores (0.1-0.3) with reason code UNEXPECTED_ENVIRONMENT on our sign-inaction,

hliuBronze 4

Google Security Operations

enrichments in detection rules - outer joins and ECG

The outer join feature recently described by @jstoner is a game-changer for YARA-L, but currently its availability is limited to SEARCH.For detection RULES, while the community has shared a couple workarounds, they each come with tradeoffs:in workar

Google Threat Intelligence

Agentic URL Scanning 2.0 Integration

Agentic now leverages VirusTotal's sandboxed browser execution to analyze suspicious URLs dynamically.Capabilities:Runtime Telemetry: Captures dynamic DOM modifications, network requests, and global JavaScript variables. Campaign Mapping: Fingerprin

Google Security Operations

How to Map Detection Rules to Related Cases in Dashboard

I'm trying to correlate detection rule data with case information in a dashboard, but I'm getting the error:"Joining Case with other data sources is not supported."My goal is to map detection details to the associated case. For example, for a detecti

Google Security Operations

Dashboard TimeFrame Filter

I’m trying to set a dashboard widget and I need to set timeframe as current month (from the month beginning till date)In relative and absolute there’s no such option. Is there a way that we can achieve this?

gabriel.marchiBronze 1

Google Security Operations

Playbook: How to use Entitys on Entity Placeholders

I need a way to pass the IP address from the UDM Principal IP field to the IP field in the Akamai block, but I couldn't find the most appropriate placeholder for it.

hliuBronze 4

Google Security Operations

correlation of the detection table, case and case_history

It is fantastic that Secops is now offering the capability to search detections and cases in the SIEM.But unfortunately today they are not able to be joined. The prebuilt Detection > Alerts & IOCs dashboard is not enough to cover below cases.

aiworkflowindiaNew Member

Google Security Operations

How is Generative AI changing cloud security operations in enterprise environments?

Over the past year, we've seen organizations increasingly adopt Generative AI tools such as Gemini, ChatGPT, and Microsoft Copilot to improve productivity.I'm curious how security teams are adapting to this change.Some questions I'd love to hear opin

handmyth_sellerNew Member

Google Security Operations

Account suspended due to unexpected Translation API charges — appeal submitted, seeking guidance

Hi Google Cloud Security Community, My Google Cloud Platform account has been suspended since May 29, 2026, and I am looking for guidance on how to get it reinstated. I have already submitted an appeal through the Google Account restrictions page, an

GinoLNew Member

Fraud Defense (reCAPTCHA)

Sudden spike of false-positive UNEXPECTED_ENVIRONMENT / low scores (0.1–0.3) for legitimate Chrome 150 desktop users since Jul 17

Hi Fraud Defense team, Starting 2026-07-17 (zero occurrences before that date), legitimate desktopChrome 150 users on our site began receiving very low reCAPTCHA Enterprisescores (0.1-0.3) with reason code UNEXPECTED_ENVIRONMENT on our sign-inaction,

hliuBronze 4

Google Security Operations

enrichments in detection rules - outer joins and ECG

The outer join feature recently described by @jstoner is a game-changer for YARA-L, but currently its availability is limited to SEARCH.For detection RULES, while the community has shared a couple workarounds, they each come with tradeoffs:in workar

hliuBronze 4

Google Security Operations

correlation of the detection table, case and case_history

It is fantastic that Secops is now offering the capability to search detections and cases in the SIEM.But unfortunately today they are not able to be joined. The prebuilt Detection > Alerts & IOCs dashboard is not enough to cover below cases.

aiworkflowindiaNew Member

Google Security Operations

How is Generative AI changing cloud security operations in enterprise environments?

Over the past year, we've seen organizations increasingly adopt Generative AI tools such as Gemini, ChatGPT, and Microsoft Copilot to improve productivity.I'm curious how security teams are adapting to this change.Some questions I'd love to hear opin

tsvetathuntandhackettNew Member

Google Security Operations

ENTITY_RISK_CHANGE events no longer being generated

Hello,I have a question regarding `ENTITY_RISK_CHANGE` events in Google SecOps.I ran the following search:```yaralmetadata.event_type = "ENTITY_RISK_CHANGE"```and can successfully retrieve matching events. However, the most recent events are dated 13

EpidotNew Member

Google Security Operations

Dashboards unable to filter on Case Closure Dates

We currently export all case data via IDE script to Power BI. Now custom fields are available in Dashboards I want to bring our reporting into Secops. However I see a huge issue. 1) Dashboards doesn’t expose case closure date/time.2) The dashboard

EpidotNew Member

Google Security Operations

Dashboards unable to filter on Case Closure Dates

We currently export all case data via IDE script to Power BI. Now custom fields are available in Dashboards I want to bring our reporting into Secops. However I see a huge issue. 1) Dashboards doesn’t expose case closure date/time.2) The dashboard

delstonBronze 2

Google Security Operations

Microsoft 365 Defender - Integration

Hi All, I am testing the Microsoft 365 Defender (XDR) Integration v26.0 and have observed the following which when looking at the documentation seems to be by design. Scenario 1Event triggered and “Incident 1” created in XDR Event triggered and “Inci

aiworkflowindiaNew Member

Cloud Security Foundation

How is AI Changing Cloud Security Operations in 2026?

Hello Everyone,With the rapid adoption of AI across organizations, I'm interested in understanding how security teams are adapting.Some questions I'd love to hear your thoughts on:Are your security teams using AI tools in daily operations? Which AI t

Security Forums

Welcome to the Google Cloud Security Forums! Your ultimate security conversation spot. Collaborate with peers and experts to solve challenges, together.

Google Security Operations

3002 topics

Google Threat Intelligence

100 topics

Security Command Center

83 topics

Security Validation

128 topics

Fraud Defense (reCAPTCHA)

305 topics

Cloud Security Foundation

61 topics

Stay Informed

Stay Informed

News & Announcements

134 topics

Getting Started

New to the Google Cloud Security Community? Our resources page has everything you need to get started! Find helpful information on account registration, navigating the community, and sharing your valuable feedback.

Community Feedback

14 topics

Resource Center

Looking to uplevel your cloud defenses? Here you’ll find dynamic guides, community insights, technical webinars, security best practices, thought leadership, courses, docs, & updates.

The Weekly Brief

53 topics

Open Questions

Can you help?

Dashboards unable to filter on Case Closure Dates

0

Community Learning! 4 Webinars and 3 Workshops. Register Now!

0

SecOps SIEMposium 2026 — A Google SecOps-Focused Conference, Oct 5–8 in San Diego

0

Validation Content Update - July 22, 2026

0

Multi-tenancy on a single Google SecOps — Part 3: Who Sees What, and Where the Alert Lands

0

Leaderboard

The leaderboard is currently empty. Contribute to the community to earn your spot!

Upcoming Community Events

Webinars, User Groups, Podcasts, more

Powered by Gainsight

Terms & ConditionsAccessibility statement

Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

© 2025 Google. All rights reserved.

Sign up

Already have an account? Login

Login with SSO

Login to the community

No account yet? Create an account

Login with SSO

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview