Thanks to visit codestin.com
Credit goes to security.googlecloudcommunity.com

User Groups
Events

Create topic
Login

💥 Google Security Operations named Leader in Gartner Magic Quadrant for SIEM! 💥

Full Details

Welcome to the Google Cloud Security Community!

Got a question? Need an answer? Let's connect!

Security Forums

Q&A, discussions, share, network

Resource Center

Your learning hub for all things security

User Groups

Join a local meetup!

Events

Discover, RSVP, connect

Featured Blog

You wont want to miss this article

New to Google SecOps: This Charming Span - Bucketing Events in Time Windows

Last time, we built a multi-stage search that generated a statistical output and then we used that output to arrive at a final search result. In a sta

Forum|Forum|2 days ago

690

Recent activity
Help others
Categories

MADcolourNew Member

reCAPTCHA

My reCAPTCHA V3 still saying its missing something

I added a reCAPTCHA V3 in elementor, using the site and secret key but in Google its still saying I am missing something.

Google Security Operations

Log parsing extension issue on vmware

Log Parsing Issue in Restricted Pipeline (Chronicle/CBN/Logstash) We are encountering persistent syntax and parsing errors in a highly restricted log processing pipeline (likely based on Logstash/Grok, possibly within Google Chronicle or CBN). We nee

11111

9 hours ago

James_RStaff

Security Validation

Reminder: Crowdstrike Alerts API and Security Validation

Greetings all,Mandiant Security Validation customers are reminded that the Crowdstrike Detects API was replaced by the Crowdstrike Alerts API in October 2025. If, upon running actions in MSV, you are not receiving the same events as you would expect

60

12 hours ago

Z

Zack_PNew Member

Google Security Operations

FortiSIEM integration broken?

HiAm trying to use the FortiSIEM connector+integration but get the below error when using the test button.Username: adminVerify SSL: False----------------- Main - Started -----------------General error performing action Fortinet FortiSIEM - PingAn er

591

1 day ago

RmossNew Member

Google Security Operations

Parsing Syslog With Nested JSON

Hi,How do I parse out “data_user_agent” in the below the nested JSON ? The log is Syslog with a JSON object: <190>Dec 9 19:55:40 test-local-primary test_audit:{ "actor_ip": "1.1.1.1, "action": "login", "created_at": [removed by moderator] , "da

323

1 day ago

M

mandiantscam25New Member

Google Threat Intelligence

Cannot OPt-Out from Mandiant Attacks

Why does Mandiant make it so hard to opt-out from their attacks? They do not provide any reverse DNS for their attack points, thus hiding their identity behind fake or hosted whois data

353

1 day ago

chuvakinStaff

CISO Blog

10 Tips for Governing AI Agents

Co-Author: Marina KaganovichThe rapid evolution from generative artificial intelligence, commonly known as genAI, to agentic AI is a stark reminder to organizations to prioritize “going back to basics” with security fundamentals, including data gover

8251

1 day ago

srajvanshNew Member

Google Security Operations

Sailpoint IAM log Parsing issues

I recently setup an integration in between SecOps and SailPoint IAM for ingestion of sailpoint logs. The pipeline setup works fine but upon searching for the logs, almost 91% of the logs were unparsed and out of the total log events ingsted.Has anyon

140

1 day ago

S

skadavSilver 2

Google Security Operations

Where to find API list for SIEM

I am trying to find API list for SIEM but unable to get it.I have SOAR Swagger API, but not able to find SIEM. Please let me know if anyone has any idea.

616

1 day ago

C

Cyber_Chief1999Bronze 2

Google Security Operations

semantic analysis: match variable encoded_value is not assigned to an event field - help required

Hi all, I am having an issue with the error message in the title field and some help would be really appreciated. I have wrote a YARA-L rule in Chronicle which captures various matching powershell command and decodes the successful match us

713

1 day ago

MADcolourNew Member

reCAPTCHA

My reCAPTCHA V3 still saying its missing something

I added a reCAPTCHA V3 in elementor, using the site and secret key but in Google its still saying I am missing something.

Google Security Operations

Log parsing extension issue on vmware

Log Parsing Issue in Restricted Pipeline (Chronicle/CBN/Logstash) We are encountering persistent syntax and parsing errors in a highly restricted log processing pipeline (likely based on Logstash/Grok, possibly within Google Chronicle or CBN). We nee

11111

9 hours ago

M

mandiantscam25New Member

Google Threat Intelligence

Cannot OPt-Out from Mandiant Attacks

Why does Mandiant make it so hard to opt-out from their attacks? They do not provide any reverse DNS for their attack points, thus hiding their identity behind fake or hosted whois data

353

1 day ago

srajvanshNew Member

Google Security Operations

Sailpoint IAM log Parsing issues

I recently setup an integration in between SecOps and SailPoint IAM for ingestion of sailpoint logs. The pipeline setup works fine but upon searching for the logs, almost 91% of the logs were unparsed and out of the total log events ingsted.Has anyon

140

1 day ago

malzahnOptivBronze 5

Google Security Operations

SOAR roles and viewing cases

Understandably, a SOAR role can only see its cases and cases of other roles configured under “Additional Roles Access” but does this include closed cases? And if so, does that make sense? I have an instance where alerts are coming in and the playboo

200

1 day ago

d_patel_djBronze 1

Google Security Operations

Is Value in Data Table Action

Hi All, I am trying to use the “Is Value in Data Table” to look for an IP address within a list of IP CIDR ranges Datatable. When I run the action, the action does not find a match - however I know the IP address is in the CIDR range within the dat

210

1 day ago

yadavmanjeet65Bronze 1

Google Security Operations

Data security for Security log data ingested in Google Chronicle SIEM.

I have been thinking about how google is assures log data post ingestion is stored in an immutable state for assurance from data security viewpoint. I tried searching for SecOps documentation but unable to find a straightforward statement. Also, onc

402

2 days ago

ashwinveNew Member

Google Security Operations

Unable to create UDM event

New to Google secops.I have an application that emits network connection/flow events, which I am trying to map to udm event.Referred,https://docs.cloud.google.com/chronicle/docs/reference/udm-field-list#Noun https://docs.cloud.google.com/chronicle/do

151

2 days ago

NotMarcusNew Member

Google Security Operations

Detection vs Created timestamp

Can someone help me understand the differences with the detection timestamp and the creation timestamp? According to this document: https://docs.cloud.google.com/chronicle/docs/detection/timestamp-definitions Detection Timestamp - The detection times

271

2 days ago

J

jeferestBronze 1

Google Security Operations

How Can I Retrieve All Context Values for a Case?

Hello,I'm looking for a way to retrieve all context values that have been set for a case. The siemplify.get_context_property() function only returns one specified context value. I need to be able to retrieve them all, in one API call if possible. Is

886

2 days ago

Security Forums

Welcome to the Google Cloud Security Forums! Your ultimate security conversation spot. Collaborate with peers and experts to solve challenges, together.

Google Security Operations

2485 topics

Google Threat Intelligence

75 topics

Security Command Center

68 topics

Security Validation

92 topics

reCAPTCHA

256 topics

Cloud Security Foundation

28 topics

Stay Informed

News & Announcements

122 topics

Getting Started

New to the Google Cloud Security Community? Our resources page has everything you need to get started! Find helpful information on account registration, navigating the community, and sharing your valuable feedback.