Google SecOps v5.0.6
Retrieve Google SecOps detections, impacted assets, IOC matches, and 3P alerts to enrich your XSOAR workflows.
- Author:
- Support:
- partner
- Default data source:
- Google Chronicle Backstory Streaming API
Classifiers (2)
Incident fields (25)
- Chronicle Alert Count
- Chronicle Alert Name
- Chronicle Auto Block Entities
- Chronicle Curated Events
- Chronicle DBot Score
- Chronicle Detection Created Time
- Chronicle Detection ID
- Chronicle Detection State
- Chronicle Detection Time
- Chronicle Detection Type
- Chronicle Detection Window End Time
- Chronicle Detection Window Start Time
- Chronicle Domain Name
- Chronicle Events
- Chronicle First Seen
- Chronicle IOC Ingest Time
- Chronicle Last Seen
- Chronicle Rule ID
- Chronicle Rule Name
- Chronicle Rule Type
- Chronicle Rule Version
- Chronicle Skip Entity Isolation
- Chronicle Source Product
- Chronicle User
- ChronicleAsset Support Contact
Incident types (5)
Indicator fields (8)
- Chronicle Isolated Hostname
- Chronicle Isolated IP
- Chronicle Potentially Blocked IP
- ChronicleAsset Summary
- ChronicleAssetHostname
- ChronicleAssetIP
- ChronicleAssetMAC
- ChronicleAssetProductID
Indicator types (1)
- reputation-ChronicleAsset
Layouts (4)
Playbooks (5)
Scripts (14)
- ChronicleAssetEventsForHostnameWidgetScript
- ChronicleAssetEventsForIPWidgetScript
- ChronicleAssetEventsForMACWidgetScript
- ChronicleAssetEventsForProductIDWidgetScript
- ChronicleAssetIdentifierScript
- ChronicleDBotScoreWidgetScript
- ChronicleDomainIntelligenceSourcesWidgetScript
- ChronicleIsolatedHostnameWidgetScript
- ChronicleIsolatedIPWidgetScript
- ChronicleListDeviceEventsByEventTypeWidgetScript
- ChroniclePotentiallyBlockedIPWidgetScript
- ConvertDomainToURLs
- ExtractDomainFromIOCDomainMatchRes
- ListDeviceEvents
README
Quickly respond to security incidents by integrating Google SecOps with Palo Alto Networks Cortex XSOAR.
Google SecOps is a cloud service, built as a specialized layer on top of core Google infrastructure, designed for enterprises to privately retain, analyze, and search the massive amounts of security and network telemetry they generate. Google SecOps normalizes, indexes, correlates, and analyzes the data to provide instant analysis and context on risky activity.
Google SecOps instances, APIs and search parameters are all accessible directly within Cortex XSOAR for full automation of playbooks.
For more information, please visit https://chronicle.security/products/platform/