User Groups
Events

Create topic
Login

Community Learning! 4 Webinars and 3 Workshops. Register Now!

8 days ago

Community Blog

Welcome to the Google Cloud Security Community blog. We bring you expert perspectives from Googlers and seasoned users, offering the insights you need to effectively utilize and optimize your security tools.

Modernizing the Google SecOps Developer Experience: The Shift to the Chronicle API

Authors:Sukeerth Reddy, Senior Product Manager Ronak Gadia, Senior Software Engineer TL;DR: We are standardizing all Google SecOps programmatic access...

Forum|Forum|9 days ago

1280

New to Google SecOps: Additional Methods to Filter in Dashboards

It’s been a while since we discussed dashboards in Google Security Operations (SecOps), so today we are going to revisit dashboards with an eye toward...

Forum|Forum|10 days ago

1354

Better Together: Integrating Wiz Defend and Google SecOps

Ready for the ultimate cloud security synergy? The integration of Google SecOps and Wiz Defend is here to elevate your security game. This powerful co...

Forum|Forum|13 days ago

8175

Blog Articles

Recent Posts

tim_galloStaff

Community Blog

GTI Update: What’s New for May 25th 2026

Author:Tim Gallo, Google Cloud, Head of Customer Engineering Detection HighlightsOur Google Threat Intelligence Group and FLARE teams are always working to update YARA rules to help customers stay ahead of emerging threats. This week, we've rolled o

2071

1 day ago

David-FrenchStaff

Community Blog

Getting Started with Data Tables in Google Security Operations

In Google Security Operations (SecOps), single-column reference lists have been a longstanding method for including or excluding events in detection rules based on a list of strings, regex expressions, or CIDR ranges. But what if you need to apply mo

345726

1 day ago

jstonerCommunity Manager

Community Blog

New to Google SecOps: Additional Methods to Filter in Dashboards

It’s been a while since we discussed dashboards in Google Security Operations (SecOps), so today we are going to revisit dashboards with an eye towards applying some additional filters to charts. We’ve previously discussed some basic filtering using

1354

3 days ago

mhayunStaff

Community Blog

Better Together: Integrating Wiz Defend and Google SecOps

Ready for the ultimate cloud security synergy? The integration of Google SecOps and Wiz Defend is here to elevate your security game. This powerful combination delivers centralized visibility by feeding all Wiz cloud detections into a single pane of

8175

9 days ago

sukeerthStaff

Community Blog

Modernizing the Google SecOps Developer Experience: The Shift to the Chronicle API

Authors:Sukeerth Reddy, Senior Product Manager Ronak Gadia, Senior Software Engineer TL;DR: We are standardizing all Google SecOps programmatic access on the next-generation Chronicle API (chronicle.googleapis.com) and announcing the deprecation of l

1280

9 days ago

David-FrenchStaff

Community Blog

Writing to Data Tables from Rules in Google SecOps

Welcome to part two of this series where we’re learning how to leverage data tables in Google Security Operations (SecOps). In part one, I explained how to create data tables and use them to filter events in rules. In today’s post, I’m going to demon

Mitigating Indirect Prompt Injection in AI Agents: A Strategic Blueprint on GCP

Authors:Olu Akinrolabu, Security Cloud ConsultantUtkarsh Bhardwaj, Technical Solutions Consultant INTRODUCTIONAs enterprises race to deploy autonomous agents utilizing Large Language Models (LLMs) like Gemini, they transition from static retrieval s

1290

14 days ago

cfrostStaff

Community Blog

Bot Defense & Bear Avoidance: Making Your Endpoints Unappetizing to Automated Predators

Author: Christopher Frost, Adoption Engineer, Security, Google Cloud There is an old survival adage that when a grizzly bear charges, you don’t have to outrun the bear—you just have to outrun the person running next to you. In the world of automated

1280

14 days ago

tarahlewisStaff

Community Blog

Modernizing Control Network Defense: Securely Scaling OT Event Analytics with Google SecOps and Bindplane under NERC CIP

Author: Tarah Lewis, Global Security Architect IntroductionThis blog is intended for security practitioners, enterprise architects, and compliance officers operating within regulated Operational Technology (OT) environments. It provides an actionable

2751

16 days ago

jstonerCommunity Manager

Community Blog

New to Google SecOps: Building a Rule To Monitor for Risky Behavior

Over the past month or so, we’ve slowly broadened our use of Google Security Operations (SecOps) rule engine to build composite rules. Today’s blog applies the concepts we’ve covered to date but now we are going to leverage risk calculations from the

12334