Skip to main content

Hey

Is there a way to get a list of parsers currently available in Google chronicle, is it published in any github. I am currently trying to train an AI model that can help me with parsing custom log sources . 

Have anyone tried this experiment? 

 

Hi,

I suggest you to ways (depend of your SIEM configuration)

1. Use the v1alpha (chronicle) API: Method: parsers.list  |  Google Security Operations  |  Google Cloud

2. Iterate over all log types using the backstory API: 

https://{}backstory.googleapis.com/v1/tools/cbnParsers/{} (where the first param is region and second param is the log type)

Thanks @bsalvatore , but do you feel its possible to have AI assist in assisting writing custom parsers. 


Thanks @bsalvatore , but do you feel its possible to have AI assist in assisting writing custom parsers. 


Honestly I don't know


Thanks @bsalvatore , but do you feel its possible to have AI assist in assisting writing custom parsers. 


Well, parsers are ultimately code and in theory AI can write any code, so it might be able to assist, but presumably there will be a lot of human intervention to be done. I assume we would have to look in some examples.


Reply