Question

AWS Shield integration with Google SecOps

+1

Hi,

Could anyone help me if you have integrated AWS Shield with Google SecOps?

I want to know which methods you have used to ingest AWS Shield events into Google SecOps.

Thank you,

+10

@verma7463 we have default ingestion label - AWS_SHIELD but no parser

From the document https://docs.aws.amazon.com/waf/latest/developerguide/logging-using-cloudtrail.html, you can enable loggin to cloudtrail then collect via AWS_CLOUDTRAIL?

Sign up