The Remote Agent provides a secure way to connect a cloud Google Security Operations
instance to remote sites. This provides MSSP and enterprise Security Operations Centers
with the following capabilities:
Execute actions and playbooks on remote sites directly from Google SecOps
Pull alerts and security data from remote sites with remote connectors
Connect to remote networks to pull data for incident response purposes
The Remote Agents infrastructure consists of 2 main components:
Google SecOps Platform Deployment of Google SecOps platform to consolidate all security alerts in one place, and orchestrate security and network products with automated workflows.
Google SecOps Agent A remote agent deployed on the remote site. The agent pulls new tasks from Google SecOps, executes remotely (on the remote\separate network) and updates Google SecOps with the results. The agent is easily deployed and lets both enterprise and MSSP end-customers to self deploy it. The agent can initiate communication with Google SecOps to get new commands and to send new alerts and data.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-06 UTC."],[[["The Remote Agent enables secure connection between a Google Security Operations instance and remote sites."],["It allows execution of actions and playbooks, along with pulling security data and alerts from remote sites directly within Google SecOps."],["The system comprises the Google SecOps Platform and the Google SecOps Agent, which is deployed on the remote site."],["The agent facilitates remote task execution and updates the Google SecOps platform with results, alerts, and data."]]],[]]