Skip to main content

graph.metadata.threat.threat_feed_name equivalent in secops for anonymous_vpn

  • November 25, 2024
  • 1 reply
  • 21 views

Mufa_shah
Forum|alt.badge.img+4

Hi all,

what would be the anonymous_vpn threat feed name equivalent in GCTI ?

1 reply

hzmndt
Staff
Forum|alt.badge.img+9
  • Staff
  • November 25, 2024

Which SecOps verison you're using? If Enterprise Plus, I suggest to open a support case to find out the info. 

Some info to share:
https://cloud.google.com/chronicle/docs/detection/ati-curated-detections
https://cloud.google.com/chronicle/docs/event-processing/data-enrichment