Blog | Community

User Groups
Events

Create topic
Login

Community Capture The Flag with Hack The Box - Operation Cymbal: Cold Room

(Thu, Oct 29, 4:00 PM)

Agentic Threat Intelligence, now in your own pipelines: a practical guide to the API

Author: Jose Luis Sanchez Martinez, Senior Security Engineer, Google Threat Intelligence While the interactive chat interface in Google Threat Intel...

Forum|Forum|1 day ago

800

Announcing the 13th FLARE-On Challenge

Author: Nick Harbour, Reverse Engineer We are proud to officially announce the thirteenth edition of the FLARE-On challenge! This is a Reverse Enginee...

Forum|Forum|7 days ago

5491

Scheduling UDM Searches to Data Tables with the Google SecOps Asynchronous Search API

Authors: Simone Bruzzechesse, Strategic Cloud Engineer In any modern Security Operations Center (SOC), contextual data is the lifeblood of high-fidel...

Forum|Forum|8 days ago

2511

Blog Articles

Recent Posts

sumitpatelStaff

Community Blog

Integrating Google SecOps into Gemini Enterprise using Custom MCP

Authors:Sumit Patel, Regional Security ArchitectYazan Mughrabi, Security Practice Lead In today’s rapidly evolving threat landscape, security teams are challenged by a persistent talent shortage and an overwhelming volume of data. Integrating Google

14891

1 day ago

Joseliyo_JstnkStaff

Community Blog

Agentic Threat Intelligence, now in your own pipelines: a practical guide to the API

Author: Jose Luis Sanchez Martinez, Senior Security Engineer, Google Threat Intelligence While the interactive chat interface in Google Threat Intelligence (GTI) provides a natural entry point for ad-hoc investigations, security analysts rarely sp

800

1 day ago

nickharbourStaff

Community Blog

Announcing the 13th FLARE-On Challenge

Author: Nick Harbour, Reverse Engineer We are proud to officially announce the thirteenth edition of the FLARE-On challenge! This is a Reverse Engineering contest that runs online for four weeks starting this Friday (September 25th, 2026) at 8pm East

5491

5 days ago

bruzzStaff

Community Blog

Scheduling UDM Searches to Data Tables with the Google SecOps Asynchronous Search API

Authors: Simone Bruzzechesse, Strategic Cloud Engineer In any modern Security Operations Center (SOC), contextual data is the lifeblood of high-fidelity threat detection and rapid incident response. Whether you are tracking privileged users, maintai

2511

6 days ago

jstonerCommunity Manager

Community Blog

New to Google SecOps: Building Your First Search with SQL Pipes

I’m excited to write this blog as we start a new journey to leverage SQL to build searches in Google Security Operations (SecOps). Over the past four years, search in Google SecOps has evolved from boolean logic to adding YARA-L constructs that enabl

3561

13 days ago

jstonerCommunity Manager

Community Blog

New to Google SecOps: |> WHERE Did Our Logs Go?

To gain familiarity with using SQL in Google Security Operations (SecOps), it seems that a good approach is to learn a bit about the different pipe operators that are available. To address more advanced use cases and build more elaborate queries, we

570

13 days ago

DanDyeStaff

Community Blog

Evaluating Agent Graphs for SecOps AI Runbooks

I recently introduced graph-based agent workflows for Google Security Operations (SecOps) and Google Threat Intelligence and today I want to show some before/after evaluations for those multi-step workflows. My hypothesis was that the graph workflows

2250

15 days ago

aumohrStaff

Community Blog

Building Custom Anomaly Detection Models with Google SecOps and BigQuery ML: Abnormal DLL Path (Part 2)

Author: Andre Mohr, Cloud Security ConsultantCo- Author: Vesselin Tzvetkov, Principal Security Engineer and Security Advisor In Part 1 of this series, we explored how to leverage the Google SecOps BigQuery Export feature alongside BigQuery ML (BQ

1260

15 days ago

EovedBronze 4

Community Blog

Beyond Chat: Building Multi Agent SOC Ecosystems with Claude and Google MCP

Author: Elirez Oved, Senior Cloud Security Consultant For any enterprise security team, the prime directive has always been simple: stay one step ahead of the adversary. But recently, threat intelligence from Mandiant's M-Trends 2026 Report has ob

15544

22 days ago

aubreyStaff

Community Blog

Stop Writing Regex: How to Create Parser Extensions using AI

Author: Aubrey Licata, Group Product Manager, Google SecOps Reduce Ingestion Toil with Agentic Parser Extensions Modern enterprise environments ingest massive, ever-evolving telemetry streams from hundreds of distinct log sources—frequently containi

3430

23 days ago

Powered by Gainsight

Terms & ConditionsAccessibility statement

Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

Sign up

Already have an account? Login

Login with SSO

Google login

Login to the community

No account yet? Create an account

Login with SSO

Google login

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.