Google Security Operations Reference

This page includes a selection of the reference topics for Google Security Operations SIEM and Google Security Operations SOAR. Use the table of contents to the left to see all of the Google Security Operations reference topics.

• Detection Engine API

  Create, run, and manage Detection Engine rules.

• Search API

  Access your security data programmatically.

• Unified Data Model field list

  List of fields in the Unified Data Model (UDM).

• Supported default parsers

  Vendor and device logs with default parsers in Google Security Operations.

• SOAR APIs

  Working with the Google Security Operations SOAR APIs.

• SOAR SDK

  Working with the Google Security Operations SOAR SDK.

• Google SecOps Response Integrations

  Working with Google SecOps Response Integrations.