Visitar URL original

Google Cloud Security Community | Community

Skip to main content

User Groups
Events

Create topic
Login

Community Capture The Flag with Hack The Box - Operation Cymbal: Cold Room

(Thu, Oct 29, 4:00 PM)

Welcome to the Google Cloud Security Community!

Got a question? Need an answer? Let's connect!

Security Forums

Q&A, discussions, share, network

Resource Center

Your learning hub for all things security

User Groups

Join a local meetup!

Events

Discover, RSVP, connect

Featured Blogs

You wont want to miss these articles

Announcing Public Preview of the Google Security Operations Detection Engineering Agent

Author: Nolan Karpinski, Group Product Manager, Google Cloud Security We are excited to share the latest leap forward in autonomous defense by announc...

Forum|Forum|1 month ago

4744

Lifecycle of a SOAR Automation

Author: Dmitry Kosarev, Senior Security Automation Engineer - Admiral Group Have you ever had to perform a laborious, repetitive task in an IT role?I...

Forum|Forum|1 month ago

4121

Beyond Chat: Building Multi Agent SOC Ecosystems with Claude and Google MCP

Author: Elirez Oved, Senior Cloud Security Consultant For any enterprise security team, the prime directive has always been simple: stay one step a...

Forum|Forum|1 month ago

16144

Recent activity
Help others
Categories

MikyTNew Member

Community Feedback

Immediate Action required: Critical Issue with your Google Cloud Agent Platform project

My 4 under development sites stopped functioning because of “Immediate Action required: Critical Issue with your Google Cloud Agent Platform project” issue. Kindly help as i don't know the actual issue and all of sites are on production.

51

mccrilbSilver 2

Google Security Operations

API Endpoint works in the MCP, but not in the legacy SOAR

Title: Google Chronicle SOAR Integration Fails "Test Connection" with GA v1 1Platform Endpoint (/ioc/listiocs 404 JSONDecodeError)Product: Google Security Operations (SOAR & SIEM)Integration: Google Chronicle (Marketplace Integration)1. Descripti

271

0x1k4zNew Member

Google Security Operations

Is a direct Event Hub feed (without Capture/Blob Storage) supported for Entra ID Audit, MDE and MDI logs?

Hi all,In the Google SecOps feed creation UI, the Microsoft Azure Event Hub source type lets me select log types such as Azure AD Directory Audit, Microsoft Defender for Endpoint and Microsoft Defender for Identity.However, the documentation for thes

212

violetaNew Member

Fraud Defense (reCAPTCHA)

SMS MFA fails with 500 INTERNAL error after enabling Phone Enforcement (Fraud Defense) in Identity Platform

Hello,I'm getting intermittent 500 INTERNAL errors from accounts/mfaEnrollment:start and accounts/mfaSignIn:start after enabling Fraud Defense "Enforce" mode (phoneEnforcementState) for SMS-based MFA in my Identity Platform project.The exact same req

110

Toni69New Member

Cloud Security Foundation

vendor risk assessment or Bank compliance review documents and reports

I’m working for vendor risk assessment or Bank compliance review for the following documents and reports. I’ve tried to access the “Compliance Reports Manager” but it seems that I have no access. Please someone advice.Google SOC2 Type II Google ISO27

141

Atul_pNew Member

Fraud Defense (reCAPTCHA)

recaptcha Backend Validation Fails with Browser_Error

Hello All ,Issue - reCAPTCHA Enterprise Policy-Based Challenge consistently returns BROWSER_ERROR for some usersWe are using reCAPTCHA Enterprise Policy-Based Challenge on an ASP.NET Web Forms application.Site key integration type: Policy-Based Chall

461

Tuesday's Tip of the Week

Tuesday's Tip of the Week - Dashboards for Detection Volume, Rule Health, and Data Quality

October 6, 2026 Audience: SOC leads, detection engineers, SecOps platform adminsSummary: Google SecOps native dashboards turn detections, rules, and ingestion telemetry into trends, so you can tell whether your detection program is working, degradin

150

Vikrant SINGHNew Member

Cloud Security Foundation

OAuth data-access verification under review since 4 Oct — no Trust & Safety contact, no reply path (sensitive scope: script.external_request)

Project ID: wixtoproject Project number: [removed by moderator] App: StoreToSheet — a published Google Workspace Marketplace add-on Submitted: 4 October 2026WHAT'S HAPPENINGI submitted OAuth data-access verification on 4 October. The Verification Cen

322

Manage the lifecycle of your IOCs in Entity Graph

Author: Peter Solagna, Cloud Security Consultant Google Cloud Security Operations lets you monitor logs for matches against indicators of compromise (IOCs).While you can enable 1st party threat intelligence feeds, many organizations also ingest prop

220

cmmartin_googleStaff

What's New in SecOps

What’s New in Google SecOps: 2026–10–05

What’s New in Google SecOps for the interval Sep 28th through 4th Oct, 2026. Product Updates & New Features Google SecOps 🚀 Release Notes from Google Cloud DocsGoogle SecOps has updated the Chronicle API Restricted Data Access Viewer IAM role, e

330

MikyTNew Member

Community Feedback

Immediate Action required: Critical Issue with your Google Cloud Agent Platform project

My 4 under development sites stopped functioning because of “Immediate Action required: Critical Issue with your Google Cloud Agent Platform project” issue. Kindly help as i don't know the actual issue and all of sites are on production.

51

mccrilbSilver 2

Google Security Operations

API Endpoint works in the MCP, but not in the legacy SOAR

Title: Google Chronicle SOAR Integration Fails "Test Connection" with GA v1 1Platform Endpoint (/ioc/listiocs 404 JSONDecodeError)Product: Google Security Operations (SOAR & SIEM)Integration: Google Chronicle (Marketplace Integration)1. Descripti

271

0x1k4zNew Member

Google Security Operations

Is a direct Event Hub feed (without Capture/Blob Storage) supported for Entra ID Audit, MDE and MDI logs?

Hi all,In the Google SecOps feed creation UI, the Microsoft Azure Event Hub source type lets me select log types such as Azure AD Directory Audit, Microsoft Defender for Endpoint and Microsoft Defender for Identity.However, the documentation for thes

212

violetaNew Member

Fraud Defense (reCAPTCHA)

SMS MFA fails with 500 INTERNAL error after enabling Phone Enforcement (Fraud Defense) in Identity Platform

Hello,I'm getting intermittent 500 INTERNAL errors from accounts/mfaEnrollment:start and accounts/mfaSignIn:start after enabling Fraud Defense "Enforce" mode (phoneEnforcementState) for SMS-based MFA in my Identity Platform project.The exact same req

110

Toni69New Member

Cloud Security Foundation

vendor risk assessment or Bank compliance review documents and reports

I’m working for vendor risk assessment or Bank compliance review for the following documents and reports. I’ve tried to access the “Compliance Reports Manager” but it seems that I have no access. Please someone advice.Google SOC2 Type II Google ISO27

141

Atul_pNew Member

Fraud Defense (reCAPTCHA)

recaptcha Backend Validation Fails with Browser_Error

Hello All ,Issue - reCAPTCHA Enterprise Policy-Based Challenge consistently returns BROWSER_ERROR for some usersWe are using reCAPTCHA Enterprise Policy-Based Challenge on an ASP.NET Web Forms application.Site key integration type: Policy-Based Chall

461

Tuesday's Tip of the Week

Tuesday's Tip of the Week - Dashboards for Detection Volume, Rule Health, and Data Quality

October 6, 2026 Audience: SOC leads, detection engineers, SecOps platform adminsSummary: Google SecOps native dashboards turn detections, rules, and ingestion telemetry into trends, so you can tell whether your detection program is working, degradin

150

Vikrant SINGHNew Member

Cloud Security Foundation

OAuth data-access verification under review since 4 Oct — no Trust & Safety contact, no reply path (sensitive scope: script.external_request)

Project ID: wixtoproject Project number: [removed by moderator] App: StoreToSheet — a published Google Workspace Marketplace add-on Submitted: 4 October 2026WHAT'S HAPPENINGI submitted OAuth data-access verification on 4 October. The Verification Cen

322

amesamehotNew Member

Google Security Operations

Does a reply to [removed by moderator] reach the compliance case?

My customer data is still on Google Cloud, but my entire account has been banned. I only want to restore access as quickly as possible.After I submitted an appeal, I received an email from an address in this format:google-cloud-compliance-reply+{case

653

delstonBronze 2

Google Security Operations

Microsoft 365 Defender - Integration

Hi All, I am testing the Microsoft 365 Defender (XDR) Integration v26.0 and have observed the following which when looking at the documentation seems to be by design. Scenario 1Event triggered and “Incident 1” created in XDR Event triggered and “Inci

24915

Security Forums

Welcome to the Google Cloud Security Forums! Your ultimate security conversation spot. Collaborate with peers and experts to solve challenges, together.

Google Security Operations

3098 topics

Google Threat Intelligence

102 topics

Security Command Center

83 topics

Security Validation

131 topics

Fraud Defense (reCAPTCHA)

313 topics

Cloud Security Foundation

73 topics

Stay Informed

Stay Informed

News & Announcements

135 topics

Getting Started

New to the Google Cloud Security Community? Our resources page has everything you need to get started! Find helpful information on account registration, navigating the community, and sharing your valuable feedback.

Community Feedback

15 topics

Resource Center

Looking to uplevel your cloud defenses? Here you’ll find dynamic guides, community insights, technical webinars, security best practices, thought leadership, courses, docs, & updates.

The Weekly Brief

77 topics

Adoption Guides-Draft

1 topic

Open Questions

Can you help?

SMS MFA fails with 500 INTERNAL error after enabling Phone Enforcement (Fraud Defense) in Identity Platform

0

WORKSPACE_ALERTS ingests only a subset of alerts, and WORKSPACE_CHROMEOS ingests no data (Third Party API feeds)

0

French healthcare application – unable to obtain Google Cloud HDS v2.0 Addendum / contact

0

Google Cloud project suspended after large Gemini batch job, appeal pending

0

Production project suspended after 400x Gemini API cost spike from leaked key.,

0

OAuth App Verification Pending state form 18 may

0

Urgent: Project neuricode-6809f suspended for ACCOUNT_HIJACKED — unable to remediate due to console lockout

0

How to restart OAuth Verification process? No email to respond to.

0

Getting {"success":false,"error-codes":["invalid-input-response"] error

0

Intermittent UNEXPECTED_ENVIRONMENT and low scores on React Native app (iOS & Android) despite matching identifiers

0

Leaderboard

The leaderboard is currently empty. Contribute to the community to earn your spot!

Upcoming Community Events

Webinars, User Groups, Podcasts, more

Powered by Gainsight

Terms & ConditionsAccessibility statement

Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

© 2025 Google. All rights reserved.

Sign up

Already have an account? Login

Login with SSO

Login to the community

Login with SSO

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview