Google SecOps SIEM Deprecates Three Mandiant/Open Source Intelligence Feeds
Google SecOps SIEM is deprecating the MANDIANT_ACTIVE_BREACH_IOC, MANDIANT_FUSION_IOC, and OPEN_SOURCE_INTEL_IOC threat intelligence feeds. These feeds are being removed in favor of the unified GTI_IOC feed, simplifying intelligence ingestion. Users must migrate their configurations to the GTI_IOC feed before March 18, 2027, when the deprecated feeds will be permanently removed. This change affects security engineers and architects managing threat intelligence in Google SecOps SIEM.
Deprecations (1) ›
- Google SecOps SIEM MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC` feeds are being removed
MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC` feeds are being removed The MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC feeds are deprecated in favor of the GTI_IOC feed. After March 18, 2027, we will be removing the MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC feeds. For more information on how to migrate, see Migrate Mandiant legacy feeds to GTI .
https://docs.cloud.google.com/release-notes#September_14_2026
Related releases
- Cloud SQL for SQL Server 2017 Deprecation and End-of-Life Announced Google Cloud release notes ·
- GCP Network Intelligence Center simplifies Monitoring Point installation Google Cloud release notes ·
- Compute Engine now shows Workload Manager findings on Overview page Google Cloud release notes ·
- Vertex AI Search: Configurable Pricing for Query Add-ons Now GA Google Cloud release notes ·
- Cloud SQL for PostgreSQL Adds `pg_textsearch` Extension for Full-Text Search Google Cloud release notes ·
- BigQuery Graph Feature Metadata Now Searchable in Knowledge Catalog Google Cloud release notes ·