91 captures

01 Sep 2024 - 07 Jun 2026

Feb	MAR	Apr
	26
2025	2026	2027

success

fail

About this capture

COLLECTED BY

Collection: Exile Media Central America

TIMESTAMPS

The Wayback Machine - https://web.archive.org/web/20260326063932/https://security.googlecloudcommunity.com/

Skip to main content

User Groups
Events

Create topic
Login

Community Webinar: Jump-start your MCP journey with the Google Security Community!

(Wed, Apr 1, 3:00 PM)

💥 Announcing M-Trends 2026 Report 💥

Welcome to the Google Cloud Security Community!

Got a question? Need an answer? Let's connect!

Security Forums

Q&A, discussions, share, network

Resource Center

Your learning hub for all things security

User Groups

Join a local meetup!

Events

Discover, RSVP, connect

Featured Blog

You wont want to miss this article

New to Google SecOps: Leveraging Okta Curated Detections to Detect ShinyHunters Related Activity

Today, Mandiant released a blog highlighting an expansion of ShinyHunters-branded extortion across multiple threat clusters. This activity isn’t assoc...

Forum|Forum|1 month ago

22041

Recent activity
Help others
Categories

spartan_07New Member

Google Security Operations

How to ensure row-level matching in data tables when using multiple columns

I'm working with data tables in Google SecOps and using them in my detection rules. I have a data table named UserAccountCreatedNew with the following columns: My goal is to check whether both Hostname and UserID from an event match a single row in t

BriMstoneNew Member

Google Security Operations

Use metrics functions for Risk Analytics rules | target.user.userid, principal.ip_geo_artifact.network.organization_name

I have the following rule, but the $historical_threshold_network_success and $historical_threshold_state_success are not counting the historical networks or states, leading to FPs where the detection triggers for user’s where the $historical_threshol

EP0Bronze 2

Google Security Operations

Feedback on New Rules Dashboard and Rules Editor

I noticed that the new Rules and Rules Editor interface are now showing up as preview. I see that there are some slight improvements but I’m also concerned that we are going to lose some functionalities with the change.Rules Editor:Current version au

loknloadBronze 1

Google Security Operations

What happened to Local App Gmail API access?

Not sure if this is the right place to ask, but I’m curious what happened to the Gmail API access exception for Local only apps? I was hoping to implement Gmail access into my iOS app but received denial from the Google Security team that said that a

SanzzNew Member

Google Security Operations

Secops Dashboard-Filters Query

Hi , I’ve noticed that when I refer data tables in a dashboard query, I’m unable to apply the global filter to that specific widget. Is this a known limitation in Google SecOps?”Query :case.alerts.entities.type = "ADDRESS"$ip = case.alerts.entities.i

NASEEFBronze 5

Google Security Operations

malicious user email match against gcti

hello teamcould you please help me with belowIf I run the search below, I was expecting to see all malicious user emails reported by GTI. However, I’m not seeing any results, even when querying data from the past year.I am able to retrieve some malic

News & Announcements

Community Contest: Create and Share Your Security Gemini Gems

Create and Share Your Security Gemini Gems We're launching a new Community challenge, and this time you not only have a chance to win Google swag, but to also be featured on the Google Cloud Security podcast with Anton Chuvakin and Timothy Peacock. T

$mfrack2$

mfrack2New Member

Google Security Operations

Chronicle API: Ingestion Methods

Hello community,Hitting a 404 when using the documented base URL for the ingestion API (v1alpha/v1beta, both in preview):https://chronicle.{region}.rep.googleapis.comSwitching to https://{region}-chronicle.googleapis.com resolves it.Additional contex

$mfrack2$

SheikStaff

Switching Google’s role with reCAPTCHA from Data Controller to Data Processor

We are excited to announce that reCAPTCHA is switching from a “data controller” offering to a “data processor” offering on April 2, 2026 and will begin processing reCAPTCHA data in alignment with other Google Cloud services. With this switch, custome

SheikStaff

Switching Google’s role with reCAPTCHA from Data Controller to Data Processor

On April 2, 2026, reCAPTCHA will transition from a Data Controller to a Data Processor, offering customers greater control over their users' personal data. With this switch, customers deploying reCAPTCHA on their websites will become data controller

spartan_07New Member

Google Security Operations

How to ensure row-level matching in data tables when using multiple columns

I'm working with data tables in Google SecOps and using them in my detection rules. I have a data table named UserAccountCreatedNew with the following columns: My goal is to check whether both Hostname and UserID from an event match a single row in t

BriMstoneNew Member

Google Security Operations

Use metrics functions for Risk Analytics rules | target.user.userid, principal.ip_geo_artifact.network.organization_name

I have the following rule, but the $historical_threshold_network_success and $historical_threshold_state_success are not counting the historical networks or states, leading to FPs where the detection triggers for user’s where the $historical_threshol

EP0Bronze 2

Google Security Operations

Feedback on New Rules Dashboard and Rules Editor

I noticed that the new Rules and Rules Editor interface are now showing up as preview. I see that there are some slight improvements but I’m also concerned that we are going to lose some functionalities with the change.Rules Editor:Current version au

loknloadBronze 1

Google Security Operations

What happened to Local App Gmail API access?

Not sure if this is the right place to ask, but I’m curious what happened to the Gmail API access exception for Local only apps? I was hoping to implement Gmail access into my iOS app but received denial from the Google Security team that said that a

SanzzNew Member

Google Security Operations

Secops Dashboard-Filters Query

Hi , I’ve noticed that when I refer data tables in a dashboard query, I’m unable to apply the global filter to that specific widget. Is this a known limitation in Google SecOps?”Query :case.alerts.entities.type = "ADDRESS"$ip = case.alerts.entities.i

NASEEFBronze 5

Google Security Operations

malicious user email match against gcti

hello teamcould you please help me with belowIf I run the search below, I was expecting to see all malicious user emails reported by GTI. However, I’m not seeing any results, even when querying data from the past year.I am able to retrieve some malic

$mfrack2$

mfrack2New Member

Google Security Operations

Chronicle API: Ingestion Methods

Hello community,Hitting a 404 when using the documented base URL for the ingestion API (v1alpha/v1beta, both in preview):https://chronicle.{region}.rep.googleapis.comSwitching to https://{region}-chronicle.googleapis.com resolves it.Additional contex

$mfrack2$

Google Security Operations

Chronicle API / v1alpha & v1beta / Method: customFieldValues.batchUpdate: 500 stream terminated by RST_STREAM with error code: NO_ERROR

This is a bug in the API implementation’s infra, most likely.If/when there’s a better place for this report, please let me know.When I attempt to send a new customFieldValue to a case, the first request’s status code is 500 and the message is:{ "erro

arv261095New Member

Google Security Operations

Chronicle Feeds not working for Intune - unable to update the client secret

Hi Team, We have a Intune feed setup in our google chronicle siem but its not working event after we have configured the api key and token properly it is giving the below error while we try updating the client secret.are there any additional permissi

Bartosz JNew Member

Google Security Operations

Building a Unified IOC Search Dashboard Across All Data Sources in Google SecOps (Chronicle)

Hi Community,Our team is looking to build a unified dashboard in Google SecOps (Chronicle) that enables analysts to search for Indicators of Compromise (IOCs) across all available data sources from a single interface.Use Cases:Username search: Enter

Security Forums

Welcome to the Google Cloud Security Forums! Your ultimate security conversation spot. Collaborate with peers and experts to solve challenges, together.

Google Security Operations

2737 topics

Google Threat Intelligence

84 topics

Security Command Center

71 topics

Security Validation

112 topics

reCAPTCHA

289 topics

Cloud Security Foundation

34 topics

Stay Informed

Stay Informed

News & Announcements

128 topics

Getting Started

New to the Google Cloud Security Community? Our resources page has everything you need to get started! Find helpful information on account registration, navigating the community, and sharing your valuable feedback.

Community Feedback

11 topics

Open Questions

Can you help?

malicious user email match against gcti

0

0

Building a Unified IOC Search Dashboard Across All Data Sources in Google SecOps (Chronicle)

0

Building a Unified IOC Search Dashboard Across All Data Sources in Google SecOps (Chronicle)

0

upgrade to duo_client_python to 5.5.0

0

Leaderboard

The leaderboard is currently empty. Contribute to the community to earn your spot!

Upcoming Community Events

Webinars, User Groups, Podcasts, more

Powered by Gainsight

Terms & Conditions Cookie settings Accessibility statement

Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

© 2025 Google. All rights reserved.

Sign up

Already have an account? Login

Login with SSO

Login to the community

Login with SSO

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK

✕

Wait! Don't Go Yet 🚀

Get our FREE eBook "10 Programming Tips That Changed Everything" when you subscribe!

No spam. Unsubscribe anytime.