The Google Cloud Security Community will be in read-only mode July 16 - July 22 as we migrate platforms. Read more and check out our FAQ.

[Ilan_Goldschmid]

Hey, i'm new to chronicle. i wanted to figure out if there's a way for a chronicle rule to populate a list upon a hit. appreciate the help !

[Tomtomfridman]

This comment was originally sent by Gal Polak
Hi @Ilan_Goldschmid , Currently there isn't an out of the box solution for this workflow and it requires to build something by yourself at this time using the Reference List API - https://cloud.google.com/chronicle/docs/reference/reference-lists-api . Please let me know if you have any additional questions