Skip to main content

User Groups
Events

Create topic
Login

Community Workshop: Searching with Google SecOps - AMER

(Wed, Aug 26, 3:00 PM)

Welcome to the Google Cloud Security Community!

Got a question? Need an answer? Let's connect!

Security Forums

Q&A, discussions, share, network

Resource Center

Your learning hub for all things security

User Groups

Join a local meetup!

Events

Discover, RSVP, connect

Featured Blogs

You wont want to miss these articles

Beyond Chat: Building Multi Agent SOC Ecosystems with Claude and Google MCP

Author: Elirez Oved, Senior Cloud Security Consultant For any enterprise security team, the prime directive has always been simple: stay one step a...

Forum|Forum|2 days ago

4441

Exploring Agent Graphs for SecOps AI Runbooks

Author: Dan Dye, Adoption Engineer, Security, Google Cloud The Agent Development Kit (ADK) project recently introduced graph-based agent workflows an...

Forum|Forum|2 days ago

2010

Better Together: Integrating Wiz Defend and Google SecOps

Ready for the ultimate cloud security synergy? The integration of Google SecOps and Wiz Defend is here to elevate your security game. This powerful co...

Forum|Forum|27 days ago

13025

Recent activity
Help others
Categories

KumarSashankGhantaNew Member

Google Security Operations

How We Built an Agentic Purple-Team System for Detection Validation in Google SecOps

An architecture walkthrough of a purple-team agent that turns detection logic into synthetic telemetry, validates it locally, sends it An architecture walkthrough of a purple-team agent that turns detection logic into synthetic telemetry, validates

donkosBronze 1

Google Security Operations

Future Python 3.11 EoL and Upgrade to other version?

Given the coming EoL for Python 3.11 in Oct 2027, is planning currently underway at all to start preparing the migration in Google SecOps SOAR to a later version than 3.11 (similarly to what was done for 3.7)?

pandamooseStaff

Cloud Security Foundation

Webinar 9/30: CodeMender: AI Code Security Agent

Hi all,You’ve been sleeping under a rock if you haven’t heard about the frontier AI models “hacking” their way out of sandboxes and finding vulnerabilities to break into production systems. But how many of you are trying to reverse that playbook and

scuba-steveNew Member

Google Security Operations

How to create an alert from a SOAR workflow

I have a playbook that needs to generate an alert in a specific environment if certain criteria are met after an investigation has been performed. It seems this may be possible in two ways:Create a UDM event in SecOps and have a detection trigger on

StevedbartlettBronze 1

Google Security Operations

Visualize NetFlow Data (Dashboard)

Hello community, as we know Bindplane now handles NetFlow data thankfully, I am reviewing the SecOps documentation and attempting to create a dashboard to help better visualize this data and while I am building out something I wanted to check in here

gkushStaff

Google Security Operations

New stats hunting skill

The SecOps platform has had a lot more mathematical analytics capabilities built into it but working with it has its own learning curve, I’ve found. To help with that, I created a new “Stats Hunter” skill:https://github.com/GooGKush/secops-statistic

ylandovskyyStaff

Google Security Operations

Use the new Secret Manager integration to automatically manage Response Integration credentials!

Hey folks,As you know, managing credentials in Google SecOps can be quite tedious. To address this, we released a new integration called “Secret Manager”. The purpose of this integration is to allow you to automatically manage all of the credentials

mccrilbSilver 2

Google Security Operations

Chronicle Rule → Outcome → SOAR Playbook Workflow

I wanted to share the workflow we’ve been using to connect Chronicle detection rules with SOAR (Gemini) playbooks, specifically focusing on how rule design directly drives playbook effectiveness.The key idea is:The rule is not just a trigger — it is

EovedBronze 4

Beyond Chat: Building Multi Agent SOC Ecosystems with Claude and Google MCP

Author: Elirez Oved, Senior Cloud Security Consultant For any enterprise security team, the prime directive has always been simple: stay one step ahead of the adversary. But recently, threat intelligence from Mandiant's M-Trends 2026 Report has ob

jdalmetBronze 2

Google Security Operations

Centralising Azure Logs in AWS S3 for SecOps Ingestion in a Multi-Cloud Environment

Azure logs can be exported to Azure Blob Storage and then copied into AWS S3 using an AWS Lambda function. From S3, the logs can be ingested into the SecOps platform.This provides a central AWS-based location for log retention and security monitoring

donkosBronze 1

Google Security Operations

Future Python 3.11 EoL and Upgrade to other version?

Given the coming EoL for Python 3.11 in Oct 2027, is planning currently underway at all to start preparing the migration in Google SecOps SOAR to a later version than 3.11 (similarly to what was done for 3.7)?

scuba-steveNew Member

Google Security Operations

How to create an alert from a SOAR workflow

I have a playbook that needs to generate an alert in a specific environment if certain criteria are met after an investigation has been performed. It seems this may be possible in two ways:Create a UDM event in SecOps and have a detection trigger on

StevedbartlettBronze 1

Google Security Operations

Visualize NetFlow Data (Dashboard)

Hello community, as we know Bindplane now handles NetFlow data thankfully, I am reviewing the SecOps documentation and attempting to create a dashboard to help better visualize this data and while I am building out something I wanted to check in here

jreyesr.tnNew Member

Google Security Operations

Clarification on data tables syntax and example shown on the most recent Tuesday's Tip of the Week

Hello! This is, I guess, aimed more at Google people (especially @dnehoda as the original writer, and I’m really sorry if directly mentioning users is rude) since it’s a question on a Google post, but please feel free to answer if you have relevant

dazzlerellisNew Member

Google Security Operations

Defender Sync Alerts Job

Can this be updated https://docs.cloud.google.com/chronicle/docs/soar/marketplace-integrations/microsoft-365-defender#sync-alertsThis job is failing as it is not taking into account alerts from insider risk policies for example or dlpThey are prefixe

delstonBronze 2

Google Security Operations

Microsoft 365 Defender - Integration

Hi All, I am testing the Microsoft 365 Defender (XDR) Integration v26.0 and have observed the following which when looking at the documentation seems to be by design. Scenario 1Event triggered and “Incident 1” created in XDR Event triggered and “Inci

Google Security Operations

Google SecOps Parser Extension - How to reference extracted.fields["_raw.log"] from base parser?

Hi everyone,I'm working on a Google SecOps Parser Extension for Terraform Enterprise logs.The base parser is successfully extracting data into UDM. For example: extracted.fields["_raw.component"] = "nginx" extracted.fields["_raw.log"] =127.0.0.6 - -

yadavmanjeet65Bronze 2

Google Security Operations

Data security for Security log data ingested in Google Chronicle SIEM.

I have been thinking about how google is assures log data post ingestion is stored in an immutable state for assurance from data security viewpoint. I tried searching for SecOps documentation but unable to find a straightforward statement. Also, onc

TRIX-y_MA.9livesglitchtwitchNew Member

Fraud Defense (reCAPTCHA)

My phone always says contact your IT administrator or forbidden from accessing your Google takeout or using ADB it says only administrators are allowed access. I previously had access right after I downloaded the app and lost it. How the hell do I ge

shanmukha1499New Member

Fraud Defense (reCAPTCHA)

Increase in low reCAPTCHA Enterprise scores

Hello We are seeing unexpectedly low reCAPTCHA Enterprise scores for our iOS application starting around May 20, 2026.The tokens are valid, but many legitimate users are receiving low scores ( 0.1–0.2 >= ), affecting application flows.We don’t hav

Security Forums

Welcome to the Google Cloud Security Forums! Your ultimate security conversation spot. Collaborate with peers and experts to solve challenges, together.

Google Security Operations

3039 topics

Google Threat Intelligence

101 topics

Security Command Center

83 topics

Security Validation

130 topics

Fraud Defense (reCAPTCHA)

306 topics

Cloud Security Foundation

66 topics

Stay Informed

Stay Informed

News & Announcements

135 topics

Getting Started

New to the Google Cloud Security Community? Our resources page has everything you need to get started! Find helpful information on account registration, navigating the community, and sharing your valuable feedback.

Community Feedback

14 topics

Resource Center

Looking to uplevel your cloud defenses? Here you’ll find dynamic guides, community insights, technical webinars, security best practices, thought leadership, courses, docs, & updates.

The Weekly Brief

59 topics

Adoption Guides-Draft

2 topics

Open Questions

Can you help?

Centralising Azure Logs in AWS S3 for SecOps Ingestion in a Multi-Cloud Environment

0

MS Teams - Adaptive cards

0

Building an Autonomous AI-Driven Zero-Trust Threat Mitigation Engine on Google Cloud

0

Community Learning! 4 Webinars and 3 Workshops. Register Now!

0

SecOps SIEMposium 2026 — A Google SecOps-Focused Conference, Oct 5–8 in San Diego

0

Leaderboard

The leaderboard is currently empty. Contribute to the community to earn your spot!

Upcoming Community Events

Webinars, User Groups, Podcasts, more

Powered by Gainsight

Terms & ConditionsAccessibility statement

Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

© 2025 Google. All rights reserved.

Sign up

Already have an account? Login

Login with SSO

Login to the community

No account yet? Create an account

Login with SSO

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview