google-secops

An autometed sniffer and parser designed to send packets captured by Wireshark to Google Chronicle.

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

A port of Google SecOps Hosted MCP to Agent Skills

A Python script that can bulk close Google SecOps SOAR cases.

Python samples and utilities for Chronicle APIs

This is an MCP (Model Context Protocol) server for interacting with Google's Chronicle Security Operations API.

A helper SDK to wrap the Google SecOps API for common security use cases

Agent Skills for Google SecOps — giving AI agents accurate knowledge for SIEM search and detection engineering.

Detection-as-code for three BFSI-targeting banking trojans (Banana RAT/SHADOW-WATER-063, TrickMo/Coper, TCLBANKER): Sigma + Microsoft Sentinel (KQL) + Google SecOps (YARA-L) rules, IOCs with GTI verdicts, and MITRE ATT&CK coverage.

“Detection engineering portfolio — KQL, Splunk, Sigma, Python enrichment scripts”

Feed monitoring system for Google SecOps