What's New in SecOps

This weeks update is brought to you by Chris Martin, Google Security Specialist.  What’s New in Google SecOps for the interval July 20 through July 27th 2026.Highlights🔥 The preview of CodeMender to find and fix software vulnerabilities🔥 Customizable schedules for YARA-L multi-event rules is now in Public Preview🤔 Google Threat Intelligence has released a new Cyber Threat Actor Naming System🔥 A Google SecOps update improving the integration with Wiz Defend🔥 SecOps SIEMposium 2026 — A Google SecOps-Focused Conference, Oct 5–8 in San DiegoSecOps SIEMposiumEarly bird registration is now open for SecOps SIEMposium, happening October 5-8, 2026 in San Diego. Join the Google…www.siemposium.com Product Updates & New Features🔥🚀 Now in preview: Find and fix software vulnerabilities with CodeMender from Google Cloud Blog Google Cloud is launching CodeMender in preview, a managed code security agent designed to help find and automatically remediate software vulnerabilities using machine

This weeks update is brought to you by Chris Martin, Google Security Specialist.  What’s New in Google SecOps for the interval July 13 through July 19 2026  What’s New in Google SecOps — July 19th 2026Product Updates & New Features Google SecOps🚀 Release Notes from Google Cloud DocsA new ‘Advanced Filtering in Dashboards’ feature is now available in Preview for security analysts, allowing dynamic values, regex, or boolean logic to be injected into YARA-L queries at runtime. [Read More]I wrote a blog on using Advanced Filters in Native Dashboards recently.A new feature allowing users to check the validation status of a SOAR migration to Google Cloud, with specific indicators for successful completion of Stage 1 and Stage 2 on the License Management page. [Read More] Google Threat Intelligence🚀 Release Notes from gtidocs.readme.ioNew product updates for July 2026, including an enhanced URL Scanning 2.0, Role-Based Access Control for Service Accounts, and improved audit log capabili

This weeks update is brought to you by Chris Martin, Google Security Specialist.  What’s New in Google SecOps for the interval July 6 through July 13, 2026 What’s New in Google SecOps, July 12th 2026 Highlights🚀 If you’re an E+ customer, the multi-event rules limit is increasing to 200 for Enterprise customers and 400 for Enterprise+ customers🔥 After many years of waiting, there is now a way to submit Parsers in SecOps and bypass Log Validation errors👀 New preview features in Google SecOps, including Case level Playbooks and Data RBAC in SIEM and SOAR using Scopes✍️ John Stoner with a new post on Exploring Detections in UDM Search🚀 A new Wiz ASM and Google TI integration is available️️📖 ️I wrote an in-depth post on how Entity Merging in Google SecOps works, and released an MCP Bridge for Google-Hosted MCP Servers,🎉 Last but not least, Google Cloud was named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Infrastructure  Product Updates & New Features Google SecOps🔥🚀 Re

This weeks update is brought to you by Chris Martin, Google Security Specialist.  What’s New in Google SecOps for the interval June 29 through July 07, 2026 Highlights 🚀 Google SecOps has launched Security Tokens into GA, the BigQuery Advanced Export to BigQuery for E+ and GUS customers.🔥 ✍️ Cloud Monitoring now has a 2 year look back capability in Cloud Monitoring  🔥 ✍️ Add your own remote MCP Servers with Gemini Enterprise Agent Platform 🔥 ✍️ Why we built ADK 2.0 and my favourite line from the blog post:Before building an autonomous agent, ask if an agent is actually the right tool for the job. If you can clearly map the workflow, use determinism What’s New in Google SecOps — July 7th, 2026 Product Updates & New Features Google SecOps🚀 Release Notes from Google Cloud DocsGoogle SecOps announces enhanced security, compliance, performance, and coverage for its Advanced BigQuery Export feature, now available in preview for Enterprise Plus customers. [Read More] Google SecOps ha

This weeks update is brought to you by Chris Martin, Google Security Specialist.  What’s New in Google SecOps for the interval June 22 through June 28  Highlights 🔥 The redesigned SecOps Use Cases platform and its freshly modernized distinct use case sub-pages Product Updates & New Features 🚀 Release Notes from Google Cloud Documentation🔥 Announcement: Google has announced improved navigation for its documentation portal, reorganizing sections to be more user-centric and aligned with security operations workflows. Google SecOps use cases | Google Security Operations | Google Cloud DocumentationWe've reorganized our navigation structure to align directly with your operational workflows. See the Google SecOps…docs.cloud.google.com Feature: Google SecOps has added an “Ask Gemini Cloud Assist” button to the Feed Management interface. It provides guidance and troubleshooting help for creating, configuring, and managing data feeds and log sources. The assistant only offers advice and

This weeks update is brought to you by Google Security Specialist, Chris Martin. What’s New in Google SecOps for the interval June 15 through June 21 2026.Correction: Data Tap is not GA, this was a documentation bug, it’s still pre-GA Highlights 🔥 There is now an official monthly Changelog for Google Cloud SecOps documentation 🔥 You can now use Google Cloud Secret Manager to manage SOAR Credentials🔥 New guidance on How To Batch Close Cases for SecOps SOAR with an out of the box Tool Product Updates & New Features Google SecOps 🥳 Google named a Leader in IDC MarketScape SIEM 2026 Vendor Assessment from Google Cloud BlogGoogle has been recognized as a Leader in the IDC MarketScape SIEM 2026 Vendor Assessment for its modern security information and event management (SIEM) systems, helping organizations defend against sophisticated threats. [Read More]🚀 Release Notes from Google Cloud DocsJune 17, 2026: Chronicle now offers a configurable auto-collapse setting for the query editor

This weeks update is brought to you by Chris Martin, Google Security Specialist.  Discover the latest updates in Google SecOps for the week of June 8 through June 14, 2026. What’s New in Google SecOps, June 14th 2026 Highlights 🎉 Search case and case_history in UDM Search is now available😎 A great article from Sumit Patel on Integrating Google SecOps into Gemini Enterprise using Custom MCP💡 Explore several interesting features in the Bindplane monthly June roundup Product Updates & New Features Google SecOps 🚀 Release Notes from Google Cloud DocumentationJune 13, 2026: Google SecOps has introduced a new detection category, ‘Non-prioritized IoC Matching rules,’ within its Curated Detections feature, leveraging IoC feeds and threat intelligence to identify malicious activities. [Read More]New Non-prioritized IoC Matching Rules Category Non-prioritized IoC Matching rules category overview | Google Security Operations | Google Cloud…These rules are not designed to be run in alertin

Another great weekly update from Chris Martin, Google Security Specialist. These are valuable insights! Thank you Chris.  What’s New in Google SecOps for the interval June 1st through June 7th 2026. Highlights 🚀 You can now Investigate Detections in SecOps UDM Search 🔥 Essential reading from Simone Bruzzechesse on SecOps API and Ingestion Health monitoring with Cloud Monitoring🔥 Essential reading from Greg Kushmerek on That Looks Different Than Yesterday🔥 Look out for the FREE John Stoner Virtual SecOps Workshops and Dave Nehoda Webinar: Detecting Compromised AI Agents  Product Updates & New Features Google SecOps🚀 Release Notes from Google Cloud DocumentationA previously announced ‘Manage access to preview features’ capability for Google Chronicle SecOps has been rolled back. [Read More] This explains why I couldn’t see this on any tenants from last week!SecOps SIEM🚀 Investigate detections in Search from Google Cloud DocumentationThis article outlines how to use Google Secur

Another great weekly update from Chris Martin, Google Security Specialist. Thank you Chris. Keep the insights coming!  What’s New in Google SecOps for the interval May 25 through May 31, 2026. HighlightsAnother week, and lots of SecOps updates.🔥 A usual great post from John Stoner on Managing Table TTL and Row Expiration ✍️ Chris Martin wrote up a brief guide on Advanced Filters in SecOps Native Dashboards 📹 And last but not least, a short video on Data RBAC in Google SecOpsWhat’s New in Google SecOps, May 31st 2026 Product Updates & New Features Google SecOps🚀 Release Notes from Google Cloud DocumentationGoogle SecOps tenant administrators can now directly manage access to public preview features via a dedicated page, eliminating the need to go through official support channels. [Read More]Manage access to preview features | Google Security Operations | Google Cloud DocumentationThis guide is for SOC managers who want to manage access to features and for security engineers who

Hi Community, we’re launching a new post every Monday (well this week is Tuesday since the US had a holiday Monday). Our goal is to bring you the latest updates to Google SecOps every Monday: what you should know, what you should care about and why it matters. We want to hear if this content is helpful so give us a thumbs up or share your feedback in the comments.  These great tips and reads are brought to you by Chris Martin, Google Security Specialist. Thank you Chris. Keep the insights coming!  What’s New in Google SecOps for the interval May 18th through May 24th 2026.  Product Updates & New Features Google SecOps🔥🚀 Release Notes, May 18, 2026 from Google Cloud Docs The Enhanced Data Export API for Google SecOps is now generally available, offering significant security and capability improvements for bulk export and archival of security data to Google Cloud Storage. [Read More] ⚙️ ️SecOps SDK Releases 0.44.1 from GitHub This release note for version 0.44.1 of google/secops-wr