Welcome to the Google Cloud Security Community!

Clarification on Approach and Webhook of SOAR

Hi everyone,We are working on integrating Google SecOps SOAR with an external application security platform, and wanted to validate our approach as well as explore better alternatives.Use Case1. Incident Sync (Bi-directional)Sync status and comments:

1948

harshal.thakorBronze 5

malachite auth scope for legacy API

I was referring to this doc for migrating legacy API to chronicle API.https://docs.cloud.google.com/chronicle/docs/administration/migrate-from-legacy-api-to-chronicle-apiIs this belowauthorization scope also needs to be migrated? as above document do

harshal.thakorBronze 5

Can I publish my SecOps SIEM custom integration in Content Hub?

I have few questions about submission process for the SecOps SIEM custom integration:Can I publish my SecOps SIEM custom integration in Content Hub? It is containing these componants: Ingestion Script Dashboard Detection Rules Search Queries

824

harshal.thakorBronze 5

GKE Terraform Kubernetes App validation Failure for Terraform

Getting error while publishing Terraform Kubernetes App. on GCP marketplace.{ "taskReports": [ { "taskType": "EXECUTE_TERRAFORM_PLAN", "taskExecutionStatus": "ISSUES_FOUND", "digest": "Failed to execute terraform plan for some vers

ar3diuSilver 2

Chronicle API Endpoint to GET deployment state of a curated rule

Since we can now change the deployment state of individual curated rules, I expected to read (GET) the same information using one of the following endpoints:https://docs.cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instan

405

harshal.thakorBronze 5

GCP Terraform Kubernetes App validation failure

I am getting below error while validating my terraform kubernetes app. Can any on ehelm what is the issue?{ "taskReports": [ { "taskType": "EXECUTE_TERRAFORM_PLAN", "taskExecutionStatus": "ISSUES_FOUND", "digest": "Unable to start

306

12 hours ago

GinoLNew Member

Fraud Defense (reCAPTCHA)

Sudden spike of false-positive UNEXPECTED_ENVIRONMENT / low scores (0.1–0.3) for legitimate Chrome 150 desktop users since Jul 17

Hi Fraud Defense team, Starting 2026-07-17 (zero occurrences before that date), legitimate desktopChrome 150 users on our site began receiving very low reCAPTCHA Enterprisescores (0.1-0.3) with reason code UNEXPECTED_ENVIRONMENT on our sign-inaction,

761

14 hours ago

vince5959New Member

Urgent – Google Cloud Project Suspended (ACCOUNT_HIJACKED) – Business Impact

Hello,My Google Cloud project has been suspended due to a security issue (ACCOUNT_HIJACKED).I fully understand the situation and I am ready to take all necessary actions to secure the project. However, I currently do not have access to the project an

44221

KragekjaerNew Member

No response, suspended Google Cloud Project

Project id: project-5580276092549813950My project got suspended 5. april, due to misuse of some keys.I have filed an appeal, taking actions on how to prevent this from happening again. But I do not get any response at all.Now observing users are drop

44513

harshal.thakorBronze 5

Clarification on Approach and Webhook of SOAR

Hi everyone,We are working on integrating Google SecOps SOAR with an external application security platform, and wanted to validate our approach as well as explore better alternatives.Use Case1. Incident Sync (Bi-directional)Sync status and comments:

1948

harshal.thakorBronze 5

malachite auth scope for legacy API

I was referring to this doc for migrating legacy API to chronicle API.https://docs.cloud.google.com/chronicle/docs/administration/migrate-from-legacy-api-to-chronicle-apiIs this belowauthorization scope also needs to be migrated? as above document do

harshal.thakorBronze 5

Can I publish my SecOps SIEM custom integration in Content Hub?

I have few questions about submission process for the SecOps SIEM custom integration:Can I publish my SecOps SIEM custom integration in Content Hub? It is containing these componants: Ingestion Script Dashboard Detection Rules Search Queries

824

harshal.thakorBronze 5

GKE Terraform Kubernetes App validation Failure for Terraform

Getting error while publishing Terraform Kubernetes App. on GCP marketplace.{ "taskReports": [ { "taskType": "EXECUTE_TERRAFORM_PLAN", "taskExecutionStatus": "ISSUES_FOUND", "digest": "Failed to execute terraform plan for some vers

harshal.thakorBronze 5

GCP Terraform Kubernetes App validation failure

I am getting below error while validating my terraform kubernetes app. Can any on ehelm what is the issue?{ "taskReports": [ { "taskType": "EXECUTE_TERRAFORM_PLAN", "taskExecutionStatus": "ISSUES_FOUND", "digest": "Unable to start

306

12 hours ago

GinoLNew Member

Fraud Defense (reCAPTCHA)

Sudden spike of false-positive UNEXPECTED_ENVIRONMENT / low scores (0.1–0.3) for legitimate Chrome 150 desktop users since Jul 17

Hi Fraud Defense team, Starting 2026-07-17 (zero occurrences before that date), legitimate desktopChrome 150 users on our site began receiving very low reCAPTCHA Enterprisescores (0.1-0.3) with reason code UNEXPECTED_ENVIRONMENT on our sign-inaction,

761

14 hours ago

vince5959New Member

Urgent – Google Cloud Project Suspended (ACCOUNT_HIJACKED) – Business Impact

Hello,My Google Cloud project has been suspended due to a security issue (ACCOUNT_HIJACKED).I fully understand the situation and I am ready to take all necessary actions to secure the project. However, I currently do not have access to the project an

44221

KragekjaerNew Member

No response, suspended Google Cloud Project

Project id: project-5580276092549813950My project got suspended 5. april, due to misuse of some keys.I have filed an appeal, taking actions on how to prevent this from happening again. But I do not get any response at all.Now observing users are drop

44513

Mufa_shahBronze 2

How should a composite YARA-L rule access outcome variables from a child rule now that detection.detection.outcomes is deprecated?

According to the Google SecOps documentation, an outcome variable from a child detection rule can be accessed in a composite rule using a path such as:e.g. detection.detection.outcomes["dest_domain"]Link :- https://docs.cloud.google.com/chronicle/doc

393

1 day ago

benstoksey33New Member

Security Validation Fails After OAuth Consent Screen Verification Despite Correct Configuration

I'm currently testing an application hosted on Google Cloud, and I'm running into a security validation issue that I can't explain. The OAuth consent screen has been configured, the authorized redirect URIs are correct, and all required scopes have b