A comprehensive technical handbook for the Google Security Operations platform, covering platform architecture, SOAR playbooks, case management, integrations, threat intelligence, automation, and incident response for security operations center teams.
Chapters
Core Components: SIEM, SOAR, and Threat Intelligence
20 min read
Data Ingestion: Pipelines and Log Forwarding
25 min read
Parsing and Normalization: Structuring Your Data
20 min read
Introduction to UDM: Unified Data Model
15 min read
Advanced Search and Querying with YARA-L
25 min read
Detection Engineering: Building Robust Rules
20 min read
Managing Threat Intelligence Feeds
15 min read
Dashboarding and Data Visualization
15 min read
Introduction to SOAR and Automation Workflows
20 min read
Building Your First Playbook: Logic and Design
25 min read
Integrating Third-Party Tools via API
20 min read
Incident Management and Case Orchestration
15 min read
Advanced Playbook Patterns and Best Practices
25 min read
Performance Tuning and Cost Optimization
15 min read
Multi-Tenant Management and Security
20 min read
Incident Response Lifecycle in Google SecOps
20 min read
Threat Hunting Methodologies
25 min read
Automation for Compliance and Reporting
15 min read
Career Roadmap: Becoming a Google SecOps Expert
10 min read