Monitoring for Unexpected Rule Changes in Google Security Operations (1 of 2)
Learn how to detect unexpected changes to your rules in Google SecOps before they can impact your defenses
Blog Articles
Practical Techniques for Monitoring Your Security Data Pipeline (2 of 2)
Learn how to proactively monitor your security data pipeline with Google SecOps and ensure your team isn't blindsided by missing logs or malicious activity going unnoticed.
Practical Techniques for Monitoring Your Security Data Pipeline (1 of 2)
Learn how to proactively monitor your security data pipeline with Google SecOps and ensure your team isn't blindsided by missing logs or malicious activity going unnoticed.
Finding Malware: Unveiling RECORDSTEALER with Google Security Operations
Learn about and the detection opportunities within Google Security Operations.
New to Google SecOps: What's in a String?
In our latest New to Google SecOps blog, we are going to introduce three string functions that can be used to easily find and extract values within a string for use in threat hunting and detection eng...
Beyond the Matrix
Drowning in a sea of ATT&CK techniques? Feeling lost in the matrix? This article reveals the secret to harnessing ATT&CK's true power and transforming your security operations from chaos to clarity.
New to Google SecOps: Turning Strings into Integers for Statistical Analysis
In our latest New to Google SecOps blog, we are going to introduce two string functions that can be used to convert string values to integers which will then be used in statistical analysis.
Developing Baseline Testing for New Security Validation Deployments
This blog explores three key use cases for how to do baseline testing in Mandiant Security Validation (MSV) - focusing on endpoint core controls, egress testing, and lateral movement, as well as provi...
Detecting Impossible Travel, with Google SecOps: Part 2
Explore creating a Playbook in Google SecOps to summarize Impossible Travel detections.
New to Google SecOps: New Statistical Functions in Search and Rules For Your Toolbox
Learn how new functions in Google SecOps can be used to calculate mean, median, mode, standard deviation and variance in rules and search
Finding Malware: Unveiling NUMOZYLOD with Google Security Operations
Learn about and the detection opportunities within Google Security Operations
Detecting Impossible Travel, with Google SecOps: Part 1
Explore creating a YARA- L rule in Google SecOps to detect Impossible Travel.
Your Roadmap to Secure AI: A Recap
Gen AI brings transformative potential, but also introduces complex challenges. Organizations must prioritize governance, security, and continuous learning to successfully navigate Gen AI adoption and...
Google Security Operations, Q2, 2024 Feature Roundup
Check out what's new in Google Security Operations with a breakdown of key features delivered by quarter.
Bulk closing alerts with Python and the Google Security Operations API
This article explains how to bulk close alerts with the Google Security Operations API. It provides step-by-step instructions and Python client code for closing a list of alerts triggered by a given d...
How to craft an Acceptable Use Policy for gen AI (and look smart doing it)
Looking to design your own “building code” or gen AI through an internal Acceptable Use Policy (AUP)? The way that you shape and evolve your AUP can help establish a shared understanding in your organ...
New to Google SecOps: Integrating Entra ID and Office 365 Using Feed Management (Part 3)
We conclude this mini-series with the integration of the Entra ID application with Google Security Operations using the Feed Management capability and cover tips for setup, troubleshooting and optiona...
Mandiant Attack Surface Management: Use Cases
Your organization's attack surface is a dynamic and ever-growing target. The sheer volume of security data from various sources can overwhelm even the most seasoned security teams. Mandiant Attack Sur...
New to Google SecOps: Integrating Entra ID and Office 365 Using Feed Management (Part 2)
Picking up where we left off last time, we look at the permissions required in an Entra ID app that are required to monitor these log sources in Google SecOps and how to configure the application.
New to Google SecOps: Integrating Entra ID and Office 365 Using Feed Management (Part 1)
Google SecOps provides organizations the ability to monitor on-premise and cloud solutions, including Microsoft Entra ID and Office 365 to gain greater visibility to threats. This post introduces the ...
Events, and Lists, and Rules, oh my!
New Google SecOps instance with no data? Use the APIs to create your first Reference List, Detection Rule, and a USER_LOGIN UDM Event that triggers the Rule.
Finding Malware: Detecting EMPTYSPACE with Google Security Operations
Learn about EMPTYSPACE and the detection opportunities within Google Security Operations.
Introducing new reCAPTCHA Fraud Intelligence Reports with Gemini capabilities
In our new Fraud Intelligence Reports, learn how Google Cloud Gemini enhances reCAPTCHA with AI-based insights. Gain insights into both global and site-specific fraud trends, empowering you to combat ...
Mandiant Security Validation - AEDA as your pre-flight checklist
Just like pilots, who have to complete a rigorous set of safety checks before every departure, security teams should also routinely evaluate security controls to help keep their organization safe. The...
Introducing reCAPTCHA SMS toll fraud protection, now in public preview
To combat the $6B+ global threat of SMS toll fraud, reCAPTCHA is excited to announce reCAPTCHA SMS toll fraud protection in public preview - customers can get started by enrolling in the console today...
Monitoring for Suspicious GitHub Activity with Google Security Operations (Part 2)
In part two of this blog series, David French walks through an example of operationalizing threat intelligence to create an actionable detection for GitHub Enterprise. He also explains the concept of ...
Monitoring for Suspicious GitHub Activity with Google Security Operations (Part 1)
For many organizations, GitHub houses critical intellectual property and is a prime target for attackers seeking to steal valuable source code, disrupt software development operations, or carry out su...
Google named a Leader in the Cybersecurity Incident Response Services Forrester Wave, Q2 2024
Today, we’re pleased to share that Google was named a Leader in The Forrester Wave™: Cybersecurity Incident Response Services Report, Q2 2024. Forrester identified 14 top vendors in the cybersecurity ...
Protect your website from fraud and abuse with the reimagined reCAPTCHA
Google reCAPTCHA has been reimagined! Learn more about new capabilities and service tiers to help protect your website and apps from bots and fraud with an invisible experience.
Beyond Detection: The art and science of proactive threat hunting
The blog discusses the benefits of threat hunting, such as preventing or minimizing impacts through reduced dwell time, improving visibility, and automating detection strategies.
