Stay Informed

Hi everyone, as shared in a previous announcement, we're excited to share the revamped community ranking system and badges are now live!  Please see our community resource article, Understanding Community Ranks and Badges and the 

Hey everyone, get ready for an exciting evolution to our Google Cloud Community!  Based on your valuable feedback, we’re revamping and revitalizing the community’s ranking system and badges, going into effect on April 5th.  Community email notifications will be paused on April 5th between 5AM and 12PM PT as we make these updates, but you will still be able to use the Community as usual.  Why the change? We heard that you want a community ranking system that recognizes the 

It’s not time to put 2023 in the rearview mirror just yet, at least not until we’ve shared our last set of Chronicle Security Operations highlights. We do like to end things with a bang and we think you’ll like how we’re closing the year out.  To access a list of our Q4 additions to Chronicle Security Operations, visit this blog. To find a comprehensive list of recent Chronicle Release Notes/Changes, go here.

Uncover threats missed by traditional detection methods.  Mandiant expert hunters will proactively scour your Chronicle Security Operations data, armed with the latest knowledge of adversary tactics, techniques, and procedures (TTPs).  Mandiant Hunt is fueled by continuous intelligence from Mandiant frontline experts, VirusTotal’s intelligence community, and Google security telemetry, ensuring your hunt leverages the latest insights. Findings come with clear explanations of the hunt process and are mapped to the MITRE ATT&CK framework, empowering you with actionable context for decisive action. For more information, refer to the Mandiant Hunt documentation and explore how

We’re glad that you’ve decided to explore our flourishing group of peers and industry experts who are here to network, share knowledge, and have fun together. Here, you can find support or network and find educational content, inspiration and encouragement, whether you are brand-new to the world of Google Cloud Security or you are a seasoned Google Cloud Security veteran. If you have not yet registered, please visit here to learn how to register. Now that you are a member, you can enjoy the following resources:  The Mandiant Forums  As a community member

  Today, we are announcing that Duet AI for Developers and Duet AI in Security Operations are now generally available (GA). These offerings join Duet AI in Google Workspace, which has been generally available since August. All of our Duet AI services will be incorporating Gemini, our most capable model, over the next few weeks. To learn more, read our Google Cloud Blog about it:

Chronicle Security Operations is coming off a pivotal third quarter. Not only did we announce a modern, AI-powered approach to TDIR, but continued to make enhancements towards everyday functionality. To find a comprehensive list of our Q3 additions, visit this blog. To find a comprehensive list of recent Chronicle Release Notes/Changes, go here.

See @jstoner's most recent article about Getting to Know Chronicle SIEM: YARA-L Rule Options in the Chronicle Best Practices page. To stay up to date on the latest in Chronicle Best Practices, consider Subscribing under Topic Options.

See @jstoner's most recent article about Getting to Know Chronicle SIEM: YARA-L Rule Options in the Chronicle Best Practices page. To stay up to date on the latest in Chronicle Best Practices, consider Subscribing under Topic Options.

At Google Cloud, we’re on a mission to accelerate security outcomes for every organization. Today, we’re thrilled to announce incredible progress towards this mission with curated detections. What are curated detections?  We are excited to announce the general availability of curated detections in Chronicle. With this release, we are providing our customers high quality, actionable, out-of-the-box detection content curated and built by Google Cloud Threat Intelligence (GCTI) researchers. These rule sets cover threats in Windows including ransomware, remote-access tools (RAT), infostealers etc. We are also expanding our coverage to detect cloud specific threats including identifying potential exfiltration of data, suspicious activity, and weakened configurations.   With curated detections in Google Chronicle, customers now have the ability to leverage the intelligence and expertise o

We are gearing up for our next Chronicle event and would love to hear what you want want us to cover. Please share your ideas by October 20th so we can generate content that matters most to you. Just drop a comment below! Or if you prefer, you can submit this anonymous form. Thank you and stay tuned for our next session on the events page here.

Hello SecOps Community, Stay up to date with everything going on in Chronicle Security Operations by reading the SecOps Customer Newsletter! Updated every other month, you can find a summary of major Product Updates, Learning and Training, Community Announcements, Best Practices, and Upcoming Events. Chronicle Security Operations Updates Introducing the unified Security Operations platform The newest version of Chronicle Security Operations introduces a modern, cloud-native, AI-powered platform that can help you stay ahead of modern threats with a focus on outcomes, a unified experience that puts proactive and reactive context at your fingertips, and practical application of AI to reduce daily toil. Here’s the highlights:

Hi SecOps Community Throughout Q4 we released a lot of new security operations features that will help you get to your goals even faster. To find a comprehensive list of our Q4 additions to Chronicle Security Operations, visit this blog To find a comprehensive list of recent Chronicle Release Notes/Changes, go here

This post was originally sent by Shaked Tal Hi SecOps Community 🙂 I’m excited to share that our SecOps Community will have a new and improved home beginning September 25, 2023 , as part of the Google Cloud Community (GCC). My name is Shaked, your current Community Manager and together with @Willie Turney , @Lauren van &

In a time when cyberattacks are rapidly growing in both frequency and sophistication, organizations are focused on addressing potential threats in a smarter, faster, and more cost-effective manner.  Chronicle SIEM is Google’s cloud-based security platform capable of ingesting massive amounts of data with built-in intelligence to quickly analyze and identify threat signals.  In this video, Program Manager Nick Troutini, provides Chronicle SIEM users the information and resources you need to quickly gain cloud security confidence with Chronicle SIEM, stay up-to-date with the latest product updates, and find support when you need it.  You can use the timestamp links to quickly navigate to topics in the video that you’re interested in learning more about: 

Hi SecOps Community :)I’m excited to share that our SecOps Community (where we are now) will have a new and improved home beginning September 25, 2023, as part of the Google Cloud Community (GCC). My name is Shaked, your current Community Manager and together with @Willie_Turney , @Lauren_vdv & @Ray_a from the Google Cloud Community team , I’m thrilled to have the opportunity to help support you as we make this transition. We believe that a strong community is essential for both your success and ours and we want to ensure we provide you with the support, content, and space to allow you to connect and learn from each other.Moving to the GCC ensures long-term durability and sustainability of this community and its programs. This iteration will al

Hi Community Chronicle Security Operations’ momentum is holding strong with additional functionality to save you time and resources. We are continuing to bolster threat detection, investigation and response capabilities for cloud environments while also focusing on everyday functionality. To find a comprehensive list of our Q2 additions to Chronicle Security Operations, visit this blog . To find a comprehensive list of recent Chronicle Release Notes/Changes, go here .

Hello SecOps Community, Stay up to date with everything going on in Chronicle SIEM and SOAR by reading the SecOps Customer Newsletter! Updated every other month, you can find a summary of major Product Updates, Learning and Training, Community Announcements, Best Practices, and Upcoming Events. Chronicle Security Operations Updates Introducing turnkey TDIR (Threat Detection, Investigation and Response) for Google Cloud  This latest release enables teams to: Detect with confidence. Out-of-the-box detection rule sets developed by Google threat researchers surface cloud attack vectors and provide high fidelity, contextualized alerts that quickly give insight into potential threats in your Google C

  Hello SecOps Community, Stay up to date with everything going on in Chronicle SIEM and SOAR by reading the SecOps Customer Newsletter! Updated every other month, you can find a summary of major Product Updates, Learning and Training, Community Announcements, Best Practices, and Upcoming Events.   SecOps Community Spotlight For a quick start guide on Getting Started With Chronicle SIEM, check out this

Hello SecOps Community,Stay up to date with everything going on in Chronicle SIEM and SOAR by reading the SecOps Customer Newsletter! Updated every other month, you can find a summary of major Product Updates, Learning and Training, Community Announcements, Best Practices, and Upcoming Events.SecOps Community SpotlightFor a quick start guide on Getting Started With Chronicle SIEM, check out this video with Program Manager, Nick Troutini. Included in the content: Where to find self help resources, how to g

Hello again SecOps Community! I am thrilled to share that Google Cloud and Mandiant will be united at RSAC 2023! We have a robust lineup at the event, including a keynote, 12 track sessions, booth in the North Expo ( N6058 ), and several hospitality events. Sign up for these “must-attend” events: Visit our website for a full list of our activities at the event! PS. If you haven’t registered for RSAC yet, be sure to use our discount code. To get a free Expo pass, enter the Google Cloud and Mandiant code 54SMANDIAXP when you

Hello SecOps Community,Stay up to date with everything going on in Chronicle SIEM and SOAR by reading the SecOps Customer Newsletter! Updated every other month, you can find a summary of major Product Updates, Learning and Training, Community Announcements, Best Practices, and Upcoming Events.SecOps Community SpotlightSecOps Office Hours We had 2 very exciting Office Hours in the Community this month where we covered these topics:How to use Approval links in Chronicle SOAR - featuring the newly added "Approval links" that allow people outside your SOC to respond using a link sent to them by the SOAR platform.What are reference lists in Chronicle SIEM and how to use them - the session

Hi SecOps Community! I wanted to invite you all to our upcoming Google Cloud Security Talks 2023 virtual event on March 22. Our first Security Talks of 2023 is designed to help you better understand threat actors and potential attack vectors, secure your cloud transformation, and detect, investigate and respond to threats faster. Hear from experts and explore the latest threat intel from across Google Cloud’s Threat Analysis Group (TAG), Mandiant and VirusTotal, see what your peers had to say as we review the results of a recent cloud security survey report, and check out all the latest Google Cloud Security product innovations! Check out our agenda, register, and more here --> https://goo.gle/3n1YmlS

Hello SecOps Community, Stay up to date with everything going on in Chronicle SIEM and SOAR by reading the SecOps Customer Newsletter! Updated every other month, you can find a summary of major Product Updates, Learning and Training, Community Announcements, Best Practices, and Upcoming Events. SecOps Community Spotlight SecOps Office Hours  In the last two office hours, we covered these topics: How to use Approval links in Chronicle SOAR - featuring the newly added "Approval links" that allow people outside your SOC to respond using a link sent to them by the SOAR platform.

As we continue to provide you with all the knowledge you need to navigate the Chronicle platform, we are now turning our attention to a very popular feature that you have asked a lot about. Our next Office Hour addresses Chronicle SOAR Approval Links. Here's the link to register!