Details on the APIs available for the SIEM are here: https://cloud.google.com/chronicle/docs/reference/backstory-api-quotas

If you'd like to see an example of them implemented, I highly recommend the SecOps CLI: https://github.com/chronicle/cli

-mike

Adding the urls for the search and ingestion APIs and Chronicle API Samples in Python:

https://cloud.google.com/chronicle/docs/reference/search-api

https://cloud.google.com/chronicle/docs/reference/ingestion-api

https://github.com/chronicle/api-samples-python

Hope this helps.

Oh also take a look at https://cloud.google.com/chronicle/docs/reference/rest

It has a lot of API calls that are not in the normal ones that the google staff posted! GL!