Guys i want to fetch 3rd party threat intel data in my google secops and make its list which will get updating every 24 hour.
can any 1 guide.
Review this list of parsers to see if you feed is there:
https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers
And this is a great entry in the community blog series New to SecOps: Building Rules with Your Own Threat Intel
Also take a look at this video: Operationalize Google's threat intelligence in Chronicle Security Operations
You should be able to ingest with an ingestion script via Cloud Run Functions - https://cloud.google.com/chronicle/docs/ingestion/ingest-using-cloud-functions#stixtaxii, https://github.com/chronicle/ingestion-scripts/tree/main/stix_taxii
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.