Google SecOps enhances data processing with Unroll processor and threat intelligence operations

Unroll Processor for Data Processing Pipelines Google SecOps data processing pipelines now support the Unroll processor (event breaking). This processor allows you to split log entries containing arrays or slices of events into multiple individual log events prior to parsing and ingestion. Key details: Event Breaking Capability: Automatically expands log arrays into discrete log events. Pre-parsing Requirement: The Unroll processor requires structured data inputs. Raw string payloads must first be parsed using a Transform processor (e.g., set(body, ParseJSON(body)) ) positioned prior to the Un

[Spotlight Feature] Operations in Emerging Threats Center Google SecOps now supports Operations in the Emerging Threats Center feed to provide rapid visibility into threat activity details involving the targeting of a single organization. Operations complement global Campaigns by providing granular threat intelligence derived from frontline investigations, such as Managed Threat Defense (MTD) engagements. For more information, see Operations in Emerging Threats . Key capabilities include: Focused threat insights : Zero in on localized adversary activity and personalized attack vectors specific