🌐 US-Proxy

id="customcss" class="twig_page-community-overview" data-bounded-context="Pages" data-entity="CommunityOverview">

Skip to main content

User Groups
Events

Create topic
Login

Community Capture The Flag with Hack The Box - Operation Cymbal: Cold Room

(Thu, Oct 29, 4:00 PM)

Community

Ask questions, get answers and engage with your peers

Home
Community

Explore the community

Join conversations, learn and grow with people who get community like you

Security Forums

6 Categories
3822 topics

Stay Informed

1 Category
135 topics

Getting Started

1 Category
16 topics

Resource Center

2 Categories
81 topics

Is this type of SIEM needs agents to be installed on the client host?

I will like to know, if this type of SIEM needs agents to be installed on the client host?

A

4 years ago

161

Recently active
Help others
Categories

trial_user_2026New Member

asked in Cloud Security Foundation

Identity Platform initializeAuth: automatic resource creation and IAM/API changes

I am preparing to initialize Google Cloud Identity Platform in a billing-enabled test project.The identitytoolkit.googleapis.com API is already enabled, but the authentication configuration returns CONFIGURATION_NOT_FOUND. I have not run initializeAu

111

SeychasDeveloperNew Member

asked in Fraud Defense (reCAPTCHA)

reCAPTCHA Android SDK 18.7.1 — HTTPS/TLS and Data Safety clarification

Hello Google Cloud reCAPTCHA Team,We are reviewing the Google Play Data Safety declarations for our published Android application SEYCHAS.Application environment: Framework: Flutter Android minSdk: 24 Android targetSdk: 36 reCAPTCHA Android SDK

40

CrescentCommunitiesBronze 1

asked in Fraud Defense (reCAPTCHA)

Unable to add or remove allowed domains from recaptcha key

I am unable to add or remove domains from the allowed domain list when editing a key. I click save and get a success toast message, but the changes aren’t actually committed.I noticed it yesterday (10/13) at 2pm ET. I can’t open a support ticket b/c

746

donkosBronze 2

posted in Google Security Operations

Migrating from Legacy Google SecOps SOAR APIs to Chronicle APIs

Just wanted to share some quick things I’ve learned about migrating to use the newq Chronicle API endpoints: 1. The APIs are maturing (but not uniformly)Over roughly the last four months, a number of endpoints that were previously available only thro

340

kentphelpsCommunity Manager

published in #GoogleTIMondays

Full Transparency - GTI Score Explainability

When a high-severity alert fires, the clock starts. Pulling the trigger on a high-priority incident response is also expensive. It pulls people off other work, can disrupt the business, and costs real money. A bare number isn't enough to justify that

390

JabyNew Member

asked in Google Security Operations

Project suspended 41 days (account hijacked) - 4 appeals, no human response (Ticket ZH4ATUO7HEX2U3633LN6LOUSLU)

Project ID: meeings-acc6e (Aura Notes)Ticket Reference ID: ZH4ATUO7HEX2U3633LN6LOUSLUSuspension reason: account hijacked (compromised credentials)Suspended since: September 4, 2026Appeal history (all under the same ticket):- Appeals submitted: Sept 1

101

CrescentCommunitiesBronze 1

asked in Fraud Defense (reCAPTCHA)

Cannot Edit Allowed Domains

I am unable to add or remove allowed domains when editing a key. When I try to add or remove a domain, and click save, I get a success message. But, when I edit the key again the changes haven’t been committed. This has been happening since 10/13/26.

220

SaitejaKattaBronze 4

asked in Google Security Operations

How to detect and get alerted when detection rules are automatically moved to PAUSED state?

Hi everyone,We have noticed that when certain detection rules exceed resource consumption limits, Google SecOps automatically transitions them to a PAUSED state (following the LIMITED throttling period). Because paused rules stop evaluating events an

331

czjStaff

published in Community Blog

Practical Threat Hunting Playbooks for Google Threat Intelligence: Querying Campaigns and Operations with Agentic Threat Intelligence

Authors: Jules Czarniak, Senior Security EngineerDaniel Kapellmann Zafra, Staff Security Engineer Connecting Intelligence to Execution Google Threat Intelligence recently introduced new capabilities that deliver frontline Mandiant technical observati

460

AnimSparrowBronze 5

posted in Google Security Operations

Google SecOps HTML View: Automatically Adapt to Light and Dark Themes

IntroductionWhen building custom HTML views in Google SecOps, one common challenge is making embedded content adapt to the application's current visual theme.A custom HTML view may look perfectly fine in light mode but become difficult to read when t

350

Show more activity

trial_user_2026New Member

asked in Cloud Security Foundation

Identity Platform initializeAuth: automatic resource creation and IAM/API changes

I am preparing to initialize Google Cloud Identity Platform in a billing-enabled test project.The identitytoolkit.googleapis.com API is already enabled, but the authentication configuration returns CONFIGURATION_NOT_FOUND. I have not run initializeAu

111

SeychasDeveloperNew Member

asked in Fraud Defense (reCAPTCHA)

reCAPTCHA Android SDK 18.7.1 — HTTPS/TLS and Data Safety clarification

Hello Google Cloud reCAPTCHA Team,We are reviewing the Google Play Data Safety declarations for our published Android application SEYCHAS.Application environment: Framework: Flutter Android minSdk: 24 Android targetSdk: 36 reCAPTCHA Android SDK

40

CrescentCommunitiesBronze 1

asked in Fraud Defense (reCAPTCHA)

Unable to add or remove allowed domains from recaptcha key

I am unable to add or remove domains from the allowed domain list when editing a key. I click save and get a success toast message, but the changes aren’t actually committed.I noticed it yesterday (10/13) at 2pm ET. I can’t open a support ticket b/c

746

JabyNew Member

asked in Google Security Operations

Project suspended 41 days (account hijacked) - 4 appeals, no human response (Ticket ZH4ATUO7HEX2U3633LN6LOUSLU)

Project ID: meeings-acc6e (Aura Notes)Ticket Reference ID: ZH4ATUO7HEX2U3633LN6LOUSLUSuspension reason: account hijacked (compromised credentials)Suspended since: September 4, 2026Appeal history (all under the same ticket):- Appeals submitted: Sept 1

101

CrescentCommunitiesBronze 1

asked in Fraud Defense (reCAPTCHA)

Cannot Edit Allowed Domains

I am unable to add or remove allowed domains when editing a key. When I try to add or remove a domain, and click save, I get a success message. But, when I edit the key again the changes haven’t been committed. This has been happening since 10/13/26.

220

SaitejaKattaBronze 4

asked in Google Security Operations

How to detect and get alerted when detection rules are automatically moved to PAUSED state?

Hi everyone,We have noticed that when certain detection rules exceed resource consumption limits, Google SecOps automatically transitions them to a PAUSED state (following the LIMITED throttling period). Because paused rules stop evaluating events an

331

stutibNew Member

asked in Google Security Operations

Automatically Retrieve and Process Files Attached to a Case

I am working on a use case in Google SecOps SOAR where I want to automatically retrieve files attached to a case and submit them to an external platform for further analysis.We are using the get_attachments function from the Siemplify SDK to retrieve

741

ShaliniPereraBronze 1

asked in Google Security Operations

Check user that last updated the rule

Hi, is there a way to check the user that has last updated a rule from the SecOps platform without checking cloud looging?

161

NASEEFSilver 2

asked in Google Security Operations

Does Google SecOps YARA-L 2.0 support Levenshtein distance or fuzzy string matching?

Hi Google SecOps Community,i would like to confirm whether YARA-L supports Levenshtein distance (edit distance) or any equivalent fuzzy string-matching functionality.Use Case:We have a detection that identifies potential data exfiltration through Mi

1176

deadlineNew Member

asked in Google Security Operations

Custom IOC feeds

Hi All, Can someone please clarify how custom IOC data is stored in the SecOps? I am coming from Splunk ES, where IOC indicators are stored in KVStore as simple lookup lists.However, when setting up third-party API feeds for IOC ingestion (Anomali) t

281

Show more activity

Security Forums

Welcome to the Google Cloud Security Forums! Your ultimate security conversation spot. Collaborate with peers and experts to solve challenges, together.

Google Security Operations

3112 topics

Google Threat Intelligence

103 topics

Security Command Center

83 topics

Security Validation

131 topics

Fraud Defense (reCAPTCHA)

316 topics

Cloud Security Foundation

77 topics

Stay Informed

Stay Informed

News & Announcements

135 topics

Getting Started

New to the Google Cloud Security Community? Our resources page has everything you need to get started! Find helpful information on account registration, navigating the community, and sharing your valuable feedback.

Community Feedback

16 topics

Resource Center

Looking to uplevel your cloud defenses? Here you’ll find dynamic guides, community insights, technical webinars, security best practices, thought leadership, courses, docs, & updates.

The Weekly Brief

80 topics

Adoption Guides-Draft

1 topic

User leaderboard

Badges

trial_user_2026has earned the badge Authored Posts 1
TDRezhas earned the badge Comments Posted 10
TDRezhas earned the badge Authored Posts 1
John Allanhas earned the badge Comments Posted 1
CrescentCommunitieshas earned the badge Authored Posts 1

Show all badges

Powered by Gainsight

Terms & ConditionsAccessibility statement

Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

© 2025 Google. All rights reserved.

Sign up

Already have an account? Login

Login with SSO

Login to the community

Login with SSO

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview