Google SecOps SIEM deprecates legacy IOC feeds
Google SecOps SIEM is deprecating three legacy Mandiant Indicator of Compromise (IOC) feeds: MANDIANT_ACTIVE_BREACH_IOC, MANDIANT_FUSION_IOC, and OPEN_SOURCE_INTEL_IOC. These feeds will be removed after March 18, 2027, and users are directed to migrate to the GTI_IOC feed. This change impacts security operations teams using these specific data feeds.
Deprecations (1) ›
- Google SecOps SIEM
The MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC feeds are deprecated in favor of the GTI_IOC feed. After March 18, 2027, we will be removing the MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC feeds. For more information on how to migrate, see Migrate Mandiant legacy feeds to GTI .
https://docs.cloud.google.com/release-notes#August_05_2026
Related releases
- Google SecOps SOAR Release 6.3.101 Rolls Out Google Cloud release notes ·
- Google SecOps SOAR Release 6.3.100 Now Available Across All Regions Google Cloud release notes ·
- Cloud Run functions Python runtime 3.10 reaches end of life in 7 days endoflife.date ·
- ShinyHunters Renews Oracle PeopleSoft Exploitation, Bypasses WAF Google Cloud Blog ·
- Compute Engine X5 series now GA with 48TB memory-optimized instances Google Cloud release notes ·
- GKE Standard Clusters Now Support Up to 512 Pods Per Node Google Cloud release notes ·