Help! Looking for Video Tutorial on Writing Parsers from Scratch in Google Chronicle

[Indrajeet_D]

Namaste everyone,

I am hoping someone can help me out. I'm trying to learn how to write parsers from scratch in Google Chronicle. I've been searching for video tutorials, but haven't had much luck.

Does anyone know of a good video resource that walks you through the process of building a custom parser in Chronicle?

Thanks in advance

[AymanC]

Hi @Indrajeet_D 

Although is not a video, this is a great blog post by thatsiemguy which helps!

https://medium.com/@thatsiemguy/parsing-101-best-practices-tips-c2e8b7ce9db8

Kind Regards,

Ayman C

[cmorris]

The resource @AymanC linked should help. Here are a couple more resources as well from CloudSkillsBoost and the SecOps learning portal:

https://learn.chronicle.security/courses/take/chronicle-siem-fundamentals/lessons/35477407-parsing-d...

https://www.cloudskillsboost.google/paths/187/course_templates/442/video/356881