User Groups
Events

Create topic
Login

Community Webinar: Parsing in SecOps: Best Practices Part 2

(Wed, Jan 28, 3:00 PM)

Welcome to the Google Cloud Security Community!

Got a question? Need an answer? Let's connect!

Security Forums

Q&A, discussions, share, network

Resource Center

Your learning hub for all things security

User Groups

Join a local meetup!

Events

Discover, RSVP, connect

Featured Blog

You wont want to miss this article

Google Cloud remote MCP server for SecOps

We’ve just launched (into preview) a remote Model Context Protocol (MCP) server for Google SecOps! This significantly simplifies the setup and usage

Forum|Forum|8 days ago

2550

Recent activity
Help others
Categories

A

akjiroBronze 1

Google Security Operations

semantic analysis: pivot event variable is not properly bounded

Hello everyone, hope you're all having a great day!I tried searching on documentations and in this forum for this specific message but had no success.I'm currently working in the following detection (Parameters were made generic for sharing purposes

176

A

8 hours ago

SagarFromAurusTechBronze 1

reCAPTCHA

Lower reCAPTCHA v3 Scores on UAT (Multi-Server Setup) Compared to QA (Single Server) Using Same Keys

We are raising this concern to the Google Cloud Security / reCAPTCHA community to understand whether the behavior we are observing is expected and to seek guidance on best practices.After deploying reCAPTCHA v3 to our UAT environment, we are consiste

772

8 hours ago

Kunj_GuptaNew Member

Google Security Operations

Issue in enriching event data using entities

I am facing a few issues while performing event enrichment using entities.One of the issues is related to partial data availability in the Overview tab. When I search for an entity in Google SecOps SIEM search and select any row in the Results sectio

701

9 hours ago

russell_pfeiferBronze 5

Google Security Operations

Help Wanted: How to Identify Dormant Accounts using Stats Search

Hey Google Cloud Community -- appreciate any help your able to provide in advance here. Put simply -- I’d like to create a stats search that identifies when an account has not logged in for over 30 days. I’d like to use the metadata.product_event_typ

172

9 hours ago

turriNew Member

Google Security Operations

Soar api , how to update integration.

Hi folks,I’m trying to create and update an integration via the API. Creating the integration works fine, but after reviewing the Swagger documentation, I don’t see an endpoint for updating it.The creation call (external/v1/integrations/CreateIntegra

332

12 hours ago

mokatsuBronze 5

Google Security Operations

Quick Actions & Playbook Blocks

Hello,I have a question about the "Quick Action" Feature. I understand that you can use quick action buttons linked to integration actions. But is there a way to link it to a playbook block? I tried using the "Attach playbook to alert" But

1155

13 hours ago

sanjay78Bronze 2

Google Security Operations

Need to create playbook for jira

Hi Community,I'm building a bidirectional integration between Google SecOps and Jira for our SOC operations and would appreciate any guidance, tutorials, or examples from those who've implemented similar workflows. I didn’t find any good tutorial to

533

14 hours ago

S

ShaliniPereraBronze 1

Google Security Operations

Check users that haven't logged in in the past month using user login logs

HiiI have a requirement to check for the users that haven't logged in using a VPN.The SIEM has logs for the users that have logged in using a VPN, but is there a way to use these logs and check for the users that havent used the VPN to login during t

611

14 hours ago

Introvert09New Member

reCAPTCHA

Google reCAPTCHA Implementation Inquiry v2 |Implementation dispute

Hi Team,We would like to seek clarification regarding the implementation of reCAPTCHA v2.We implemented reCAPTCHA v2 a few years ago and would like to confirm whether server-side validation was mandatory at that time. Based on the documentation avail

Google Security Operations

Log type for Windows logs : WINEVTLOG or WINEVTLOG_XML

Hi Team,In our environment, we are using the Bindplane agent to forward logs to the SecOps console.The Bindplane agent is installed on each server and forwards logs to the Gateway, from where they are sent to the SecOps console.We are currently tryin

433

19 hours ago

A

akjiroBronze 1

Google Security Operations

semantic analysis: pivot event variable is not properly bounded

Hello everyone, hope you're all having a great day!I tried searching on documentations and in this forum for this specific message but had no success.I'm currently working in the following detection (Parameters were made generic for sharing purposes

176

A

8 hours ago

SagarFromAurusTechBronze 1

reCAPTCHA

Lower reCAPTCHA v3 Scores on UAT (Multi-Server Setup) Compared to QA (Single Server) Using Same Keys

We are raising this concern to the Google Cloud Security / reCAPTCHA community to understand whether the behavior we are observing is expected and to seek guidance on best practices.After deploying reCAPTCHA v3 to our UAT environment, we are consiste

772

8 hours ago

Kunj_GuptaNew Member

Google Security Operations

Issue in enriching event data using entities

I am facing a few issues while performing event enrichment using entities.One of the issues is related to partial data availability in the Overview tab. When I search for an entity in Google SecOps SIEM search and select any row in the Results sectio

701

9 hours ago

turriNew Member

Google Security Operations

Soar api , how to update integration.

Hi folks,I’m trying to create and update an integration via the API. Creating the integration works fine, but after reviewing the Swagger documentation, I don’t see an endpoint for updating it.The creation call (external/v1/integrations/CreateIntegra

332

12 hours ago

sanjay78Bronze 2

Google Security Operations

Need to create playbook for jira

Hi Community,I'm building a bidirectional integration between Google SecOps and Jira for our SOC operations and would appreciate any guidance, tutorials, or examples from those who've implemented similar workflows. I didn’t find any good tutorial to

533

14 hours ago

S

ShaliniPereraBronze 1

Google Security Operations

Check users that haven't logged in in the past month using user login logs

HiiI have a requirement to check for the users that haven't logged in using a VPN.The SIEM has logs for the users that have logged in using a VPN, but is there a way to use these logs and check for the users that havent used the VPN to login during t

611

14 hours ago

Introvert09New Member

reCAPTCHA

Google reCAPTCHA Implementation Inquiry v2 |Implementation dispute

Hi Team,We would like to seek clarification regarding the implementation of reCAPTCHA v2.We implemented reCAPTCHA v2 a few years ago and would like to confirm whether server-side validation was mandatory at that time. Based on the documentation avail

Google Security Operations

Log type for Windows logs : WINEVTLOG or WINEVTLOG_XML

Hi Team,In our environment, we are using the Bindplane agent to forward logs to the SecOps console.The Bindplane agent is installed on each server and forwards logs to the Gateway, from where they are sent to the SecOps console.We are currently tryin

433

19 hours ago

agar_sNew Member

Google Security Operations

How to build SLA dashboards for cases and analysts in Google SecOps?

Hello,I’m implementing SLA tracking for Cases in Google SecOps and would like to understand the best practice for building dashboards.My SLA logic includes: Time to analyst assignment (unassigned → assigned) Identification of SLA-breached cases V

150

1 day ago

agar_sNew Member

Google Security Operations

How to implement SLA for analyst assignment in Google SecOps?

Hello,I’m trying to implement an SLA workflow for Cases in Google SecOps, specifically around analyst assignment and investigation timing, and I’d appreciate guidance on best practices.From what I can see today, at the system level, Google SecOps pro

90

1 day ago

Security Forums

Welcome to the Google Cloud Security Forums! Your ultimate security conversation spot. Collaborate with peers and experts to solve challenges, together.

Google Security Operations

2527 topics

Google Threat Intelligence

77 topics

Security Command Center

68 topics

Security Validation

102 topics

reCAPTCHA

268 topics

Cloud Security Foundation

27 topics

Stay Informed

News & Announcements

124 topics

Getting Started

New to the Google Cloud Security Community? Our resources page has everything you need to get started! Find helpful information on account registration, navigating the community, and sharing your valuable feedback.