Find hidden threats in your enterprise logs.
What it does
Identifies hidden threats and suspicious behavior in enterprise telemetry through proactive threat hunts.
When to use it
Use for proactive threat hunting, retroactive indicator analysis, prevalence searches, technique-based hunts, or behavioral anomaly detection.
How to use it
Give it a threat-hunting objective; it investigates enterprise telemetry, generates a summary report, and posts findings to SOAR.
Uses
GS
Good to know
- cannot be undone: Google SecOps
Latest review
What you need · 1
Requires a Google SecOps environment containing enterprise telemetry to investigate.
Access · 1
This skill
Google SecOps
Write
Posts findings to SOAR cases (irreversible)