InGoogle Cloud - CommunitybyJohn Stoner·1d agoNew to Google SecOps: Same as It Ever Was? Not When You Use |> EXTENDI hope you are enjoying this mini-series on SQL Pipe syntax and that you’ve tried a few SQL queries out in Google Security Operations…
InGoogle Cloud - CommunitybyJohn Stoner·Oct 22New to Google SecOps: Don’t Get Aggravated, It’s Just |> AGGREGATEWe’re back this week with another SQL pipe operator! The first two pipe operators we covered, WHERE and SELECT focused on constraining the…
InGoogle Cloud - CommunitybyJohn Stoner·Oct 8New to Google SecOps: Please, Please, Please, Let Me |> SELECT What I WantIn our previous blog, we introduced the WHERE pipe operator and discussed how it can be used to filter rows from a data set. Today, we are…
InGoogle Cloud - CommunitybyJohn Stoner·Oct 1New to Google SecOps: |> WHERE Did Our Logs Go?To gain familiarity with using SQL in Google Security Operations (SecOps), it seems that a good approach is to learn a bit about the…A response icon1A response icon1
InGoogle Cloud - CommunitybyJohn Stoner·Sep 16New to Google SecOps: Building Your First Search with SQL PipesI’m excited to write this blog as we start a new journey to leverage SQL to build searches in Google Security Operations (SecOps). Over the…A response icon2A response icon2
InGoogle Cloud - CommunitybyJohn Stoner·Aug 13New to Google SecOps: Drilling Down the HouseToday, we are going to build a set of metrics in a dashboard using the cases dataset. These metrics will then be used with the case detail…
InGoogle Cloud - CommunitybyJohn Stoner·Jul 30New to Google SecOps: Additional Methods to Filter in DashboardsIt’s been a while since we discussed dashboards in Google Security Operations (SecOps), so today we are going to revisit dashboards with an…
InGoogle Cloud - CommunitybyJohn Stoner·Jul 10New to Google SecOps: Exploring DetectionsWe’ve spent plenty of time building searches in Google Security Operations (SecOps), but previously we focused on building searches for…
InGoogle Cloud - CommunitybyJohn Stoner·Jun 11New To Google SecOps: Disintegration — Working with TTLs in Data TablesIn our last blog, we reviewed how users could set row based expirations using a time to live (TTL) value in data tables and applied this to…
InGoogle Cloud - CommunitybyJohn Stoner·May 29New To Google SecOps: Fade to Grey: Managing Table TTL and Row ExpirationWe’ve previously discussed a number of capabilities that data tables provide Google Security Operations (SecOps) including handling large…
