Author: Yuriy LandovskyyCo-Author: Oleg Siminel Overview This guide provides detailed insights into the integration item, “Action”. Google Cloud Security Operations (SecOps) Actions are Python scripts executed within playbooks to automate security ta...

IntroductionCore First Principle of Cyber SecurityContinuous Detection & Continuous ResponsePractical Application: Data VisibilityManaging ForwardersConfiguring Bindplane AgentsPractical Application: Security AnalyticsPractical Application: Response ...

Author: Raimundo Alcazar This guide details how practitioners can leverage Google Threat Intelligence to gain insights into phishing campaigns targeting their organization and to investigate broader phishing trends. Phishing attacks against organizat...

Author: Robert ParkerCollaborator: Chris Ralph Introduction The Digital Threat Monitoring (DTM) Module in Google Threat Intelligence is a powerful tool for monitoring against your brand, domains, and IPs that may be targeted by threat actors within t...

Author: Hafez Mohamed Deep Dive into UDM Parsing – How I learned to stop worrying and love the "log" This guide explores UDM (Unified Data Model) parsing, focusing on transforming JSON logs into the Google UDM schema. We'll cover log schema analysis,...