Stay organized with collections
Save and categorize content based on your preferences.
Requirements for publishing use case
- The simulation alerts in the use case are based on real alerts from a real product.
- All entities are extracted when running the simulation alert in a clean environment.
- All entities are extracted when running the real alert with the connector.
- The playbook runs end to end without errors.
- The final delivery is a ZIP file export that can be imported without errors into the Chronicle Marketplace.
- When deployed, all the user has to do is configure the integrations to make the playbook run end to end with simulation alerts.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2023-12-04 UTC.
[{
"type": "thumb-down",
"id": "hardToUnderstand",
"label":"Hard to understand"
},{
"type": "thumb-down",
"id": "incorrectInformationOrSampleCode",
"label":"Incorrect information or sample code"
},{
"type": "thumb-down",
"id": "missingTheInformationSamplesINeed",
"label":"Missing the information/samples I need"
},{
"type": "thumb-down",
"id": "otherDown",
"label":"Other"
}]
[{
"type": "thumb-up",
"id": "easyToUnderstand",
"label":"Easy to understand"
},{
"type": "thumb-up",
"id": "solvedMyProblem",
"label":"Solved my problem"
},{
"type": "thumb-up",
"id": "otherUp",
"label":"Other"
}]