Google Security Operations FAQ

Updated

Is the legacy Recorded Future SOAR app on Google marketplace still supported?

The “certified” Google SecOps marketplace integration “RecordedFuture” is considered deprecated and should not be used. Instead, use the “Community” integration “RecordedFutureIntelligence.”

Is the legacy 3rd party Recorded Future API feed in Google SecOps SIEM still supported?

The Google SecOps third-party API feed “Recorded Future” is considered deprecated and should not be used. Instead, use the ingestion script located in GitHub.

What data does Collective Insights ingest from Google Security Operations SOAR?

  • IoCs enriched by Recorded Future
  • The type (IP Address, Domain, etc.) of the IoC enriched by Recorded Future
  • The case name the IoC is attached to
  • The case ID the IoC is attached to
  • The timestamp of the case the IoC is attached to

 

This content is confidential. Do not distribute or download content in a manner that violates your Recorded Future license agreement. Sharing this content outside of licensed Recorded Future users constitutes a breach of the terms and/or agreement and shall be considered a breach by your organization.
Was this article helpful?
0 out of 0 found this helpful

Articles in this section