Composite rules in Google SecOps unlock additional methods to build detection and hunting rules. In the first of a mini-series on composite rules, let’s tackle the fundamentals of a composite rule tha...
We are thrilled to announce the public preview announcement of Composite Detections in Google SecOps, empowering security teams with a new level of flexibility and sophistication in their threat detec...
Want to convert that string to a numeric and do some math for your latest search, rule or dashboard? This blog explores how we can take strings and convert them to numeric floats in Google SecOps!
Converting data types within your searches, rules and dashboards is often needed but how do we do this? In this blog we will explore how we can take strings or integers and convert them to boolean in ...
We are back with more dashboarding in Google SecOps as we demonstrate how to group our result sets into a time chart making it easier to work with UDM data and quickly add these results to our new or ...
Today’s blog is a double holiday helping of troubleshooting tips on YARA-L rules including how to handle complex logic and testing thresholds before deploying them in your rules! Try these out the nex...
Dive into the world of detection engineering and learn how to leverage Google Threat Intelligence and VirusTotal to identify and counter malicious activity
Learn how to apply the function timestamp.diff to calculate the difference in specific time units within your datasets and how it differs from calculating differences using mathematical operations!
Learn about GOOTLOADER infection chain and detection opportunities.
Learn how to use the timestamp.truncate function to easily aggregate or bucket today in your searches and rules for investigating and hunting!
Learn how string functions like strings.extract_hostname and strings.extract_domain and be used to easily grab portions of strings and use them in searches and rules in Google SecOps to streamline you...
In our latest New to Google SecOps blog, we are going to introduce three string functions that can be used to easily find and extract values within a string for use in threat hunting and detection eng...
Learn about EMPTYSPACE and the detection opportunities within Google Security Operations.
In part two of this blog series, David French walks through an example of operationalizing threat intelligence to create an actionable detection for GitHub Enterprise. He also explains the concept of ...
For many organizations, GitHub houses critical intellectual property and is a prime target for attackers seeking to steal valuable source code, disrupt software development operations, or carry out su...
Learn about SOGU malware and the detection opportunities within Google Security Operations.
In this blog, we will continue to extend our visibility. We will discover how we're developing custom integrations within Google SecOps platform for CRXcavator and Spin.AI to assess browser extensions...
Level up your Detection Engineering capabilities by implementing a modern workflow that uses free tools to automate the management of detection rules in Chronicle.
David Nehoda reveals the capabilities of Artificial Intelligence by showcasing how to effectively utilize the AI console within Chronicle SIEM for crafting detection rules.
Use Security Command Center Premium to detect workloads in unauthorized regions
