Close threat detection gaps in Google SecOps.
What it does
Creates and deploys detection rules in Google SecOps and identifies detection gaps using simulated threat events.
When to use it
Use when writing or tuning detection rules, validating syntax, testing historical telemetry, or evaluating coverage against threat intelligence and CVE disclosures.
How to use it
Give it detection logic or threat intelligence; it tests rules or evaluates coverage and deploys new rules after user approval.
Uses
GS
Latest review
What you need · 1
Requires an existing Google SecOps environment in which to test coverage and deploy approved detection rules.
Access · 2
This skill
Google SecOps
Execute
Starts asynchronous coverage evaluations
Write
Creates rules in Google SecOps
threat intelligence pages
Read
Fetches threat intelligence pages