New Google Cloud Security Customer Success Services Available!
We are excited to announce the availability of Google Cloud Security Customer Success subscriptions. Optimize ...
Forum Posts
Does Chronicle SOAR has ability to setup a proxy for routing the network calls?
Hi Team,Want to know. Does Chronicle SOAR has ability to setup a proxy for routing the network calls (i.e. wit...
Flow- Instruction action : give instruction with hyper links of documents/PDF
How to insert links of instruction doc/pdf in instruction action so that analyst can refer to perform the acti...
Support for Dropdown fields for Configuration Parameters of an Integration
Hey guys, currently, I am in the process of creating a new custom integration for Chronicle SOAR platform. My ...
Ontology Mapping - Microsoft Defender 365
Has anyone had any luck configuring their event mappings in SOAR for this integration?Seems every single event...
SOAR automation access control
Can SOAR through it's automation rapidly change access control mechanisms?
How to publish Custom SOAR integration to market place
Hi, We are a software company and are building new CUSTOM integration for Google Chronicle SOAR, for our clien...
SIEM/SOAR Capability
Does Google Security Operations implement nonsignature-based malicious code detection mechanisms?Nonsignature-...
Loop playbook action
Flow-multiple choice question: for example if answer is no, I want to the "no" branch does a feedback and get ...
Flow- Instruction action approval link
How does Approval link in flow-instruction action works?How to leverage this in playbook?
Integration Logs
Hi team,I want to capture the logs of any integration (from the marketplace and custom).is there any way we ca...
Integration of SMTP email in Chronicle SOAR
Hi Team,I am unable to configure SMTP in Chronicle SOAR. After providing required details in the chronicle SOA...
Slack Interactivity URL
HelloWe finally moved to SOAR and are experiencing an issue with our first integration. I've enabled the Slack...
How to rerun any Action if it got failed due to some reason via job
Hi team,I want to know if there is any possibility that I can rerun any failed action via the jobAlso, can I c...
Gitsync integration with Chronicle SOAR
I have integrated Gitsync with chronicle SOAR.It does not save the version of playbooks in git repo , it just ...
Exporting and importing Playbooks, Custom Integration
if a export a playbook which has versions (v1,v2 ..so on ) and if i export the playbook and import it back the...
Remote Agent installation
in which scenario we should use Remote Agent and why ?which is best option - remote agent installation via Doc...
Environment Setup in Chronicle SOAR
1. Alias What is Alias ? How to leverage this alias , while setting up new environments ?can any one provide a...
SecOps Looker Data Ingest Interval
Hi,Apologies if this has already been asked but i've scoured the forums to no avail. What currently is the sch...
Jira integration Issue
Hello,Has anyone configured the Chronicle SOAR Jira integration to work with Jira service desk on-prem? I've a...
How to attach events to case in Google SecOps SOAR?
I am aware that we can include the artifacts like source IP's to the case but what I want to know is cant we a...
Remove unwanted service account key using remote agent
Hello,I have a playbook to monitor unauthorized creation of GCP service account keys, I need to automate the r...
Darktrace Connector not ingesting cases
Hi everyone, we configured the Darktrace model breach connector on our SOAR instance. Performing tests all wor...
Send_mail
hi team I want to send a mail in a job and I'm using SendEmailWithAttachment but it is showing this error and ...
Splunk Integration with Chronicle SOAR
while installing splunk integration it's asking for to select ontology mapping , which option should we select...
Environment Setup in chronicle SOAR
How this option works need more information to understand : Append to all Users and API Keys?"Make sure to cli...
SOAR MSSP and customer access
HI allwe have configured our Secops MSSP tenant using Workforce Identity Pool and MS365 as backend IdP as expl...
Integration of Threat Intelligence Platform in Chronicle secops
Hi Team,We have successfully integrated several supported Threat Intelligence (TI) platforms. However, we need...
Ms Teams: Send User Message error
Hi,we have integrated Teams with Google SOAR. The integration is OK, but we'd like to send one message to some...
MS Graph Mail cannot send mail
Hi,we have created an integration with MS Grpah Mail (https://cloud.google.com/chronicle/docs/soar/marketplace...
What are the triggers that automatic disable SOAR accounts?
Hello, I have just found a number of collaborators accounts on our SOAR platform been disabled. Since nobody f...