Question

AWS Shield integration with Google SecOps

+1

Hi,

Could anyone help me if you have integrated AWS Shield with Google SecOps?

I want to know which methods you have used to ingest AWS Shield events into Google SecOps.

Thank you,

+12

@verma7463 we have default ingestion label - AWS_SHIELD but no parser

From the document https://docs.aws.amazon.com/waf/latest/developerguide/logging-using-cloudtrail.html, you can enable loggin to cloudtrail then collect via AWS_CLOUDTRAIL?

+1

Hi @hzmndt , Cloudtrail will give the metrics not the events generated by AWS Shield. I want to collect Shield Events.

+3

Hi @verma7463 ,
Hope you completed the AWS_SHIELD integration, Could you help me if you have integrated AWS Shield with Google SecOps?

if clear doc available please share with me that help me
Thanks.

Sign up