-
Use this document to manage integrations using one of the following methods:
()
()
Integrations
This method is the preferred approach for configuring integrations in .
After you configure Direct and Remo...
-
The following tables describe the system requirements for the Validation Platform components. See the respective pages for full details.
Linux Actors
Linux Actors can be installed as Network Actors or Endpoint Actors .
...
-
The following tables list the supported security technologies, required Google Security Operations parsers, and supported alert types from each vendor that are processed as part of providing security event monitoring and threat hunting services....
-
Project membership A Project is essentially a workspace that contains Collections along with Owners and Members authorized to view the contents of those Collections. There can be multiple Projects in an organization, each with different Owners, dif...
-
Issues are respective to the entity type, and different entity types warrant their own issue checks. The most common issue checks are for URI entities. Issue checks are selected based on the technology and version (as captured) that is fingerpri...
-
This integration is not currently supported for Azure Government users.
With Azure, retrieves public virtual machine (VM) instances, public DNS zones, and Blob Storage resources. For Blobs, checks to see if they are publicly accessible an...
-
This section describes the decisions you need to make before installing the Validation Platform Actor. The following topics are included: Choosing an Installation Method Handling Software Dependencies Addressing Access Controls Choos...
-
The specifications in the following table are necessary for the installation of each Protected Theater. Protected Actor Minimum System Requirements are separate and must be considered when configuring the disk (Gold) image requirements.
T...
-
Actions are suspicious or malicious behaviors that are processed between or on Actors. Actions are designed to mimic attacker behaviors. Running Actions in your environment is a useful starting point, as they can help you understand how your env...
-
Installing the integration in the standard method doesn't always work because communication would be prevented by network boundary issues. In that case, you can configure a Remote Integration. Remote Integrations are integrations that are installe...