You can write:

> I like the new AI-powered features in Google Security Operations, especially the Threat Hunt Agent and Detection Engineering Agent. They can help security teams find threats faster, identify detection gaps, and create detection rules more efficiently. Review collected by and hosted on G2.com.

Yes. A good constructive answer would be:

> Google Security Operations could improve by making the user interface simpler for beginners, providing clearer explanations for AI-generated recommendations, and making setup and configuration easier. Better documentation and more guided tutorials would also help new users get started faster. Review collected by and hosted on G2.com.

I really like Google Security Operations because it provides a centralized and user-friendly way to monitor and manage security activity. The platform makes it easier to identify potential threats, investigate issues, and stay on top of security alerts without having to navigate multiple systems. I also appreciate the organization and visibility it provides, which helps make security operations more efficient and manageable. Overall, it’s a reliable tool that gives me greater confidence in monitoring and responding to security concerns. Review collected by and hosted on G2.com.

There is nothing thus far I dislike about this program. Review collected by and hosted on G2.com.

To me the biggest benefit is the speed at which I can go from receiving an alert to starting an investigation. I’m able to search across volumes of security data, pivot from users to IPs to hosts to domains and create timelines without having to hop between too many products. That alone is extremely helpful during incidents when I’m trying to find answers as quickly as possible rather than spending half the time just locating the proper logs. Review collected by and hosted on G2.com.

Its not quite plug and play. You need clean log ingestion, adequate parsing, and well designed detections before you can really start to see value. Investigation can become very frustrating when a data source is improperly normalized. There’s also some learning curve from the search/detection side for new analysts. Review collected by and hosted on G2.com.

The service task involves managing and optimizing the use of Google Security Operations for log ingestion, analysis, and threat detection. This includes configuring YARA-L rules, utilizing the Unified Data Model, and ensuring seamless integration with existing network infrastructure. The task also requires the creation of custom log parsers and the development of advanced dashboards for comprehensive reporting. Review collected by and hosted on G2.com.

I am a security engineer for a medium sized financial institution. Ingesting, parsing, and analyzing huge volumes of firewall, endpoint and web application logs with Google Security Operations, our cloud-native SIEM. Our team uses it every day to respond to incidents, actively hunt for threats, and correlate alerts with Mandiant threat intelligence as a means to defend our network infrastructure.What this platform has got going for it is simply the rapidity of searching. Data queries on months or even years of network traffic and/or proxy log data takes literal seconds due to running on Google's back end infrastructure. Our previous SIEM would time-out or crash against a 90 days historical search. Additionally, I really value their pricing model. Google doesn't support ingestion per gigabyte as this would mean you're always dropping low priority logs to save money – instead I'm able to ingest pretty much everything! I feel that that full, unabbreviated view without having to think about daily limits is a gamechanger for our SOC. The built-in Mandiant threat intelligence is also extremely powerful, and alerts to malicious hashes and IPs with a very low false positive rate. Review collected by and hosted on G2.com.

Google Security Operations offers great visibility into security alerts and accelerates threat investigation for security teams. It centralizes your security data and streamlines how you collect, analyze, and correlate security data from across your organization. Searching is powerful, as well, when you’re dealing with massive quantities of logs and security telemetry. Investigating threats is much faster because you can quickly see all of the context around an alert rather than having to look across several tools. Review collected by and hosted on G2.com.

It can take a little while to learn how to use the product if you’re new to it. There is a bit of a learning curve to understand how features work, what detections are available, and how to investigate different types of alerts. Review collected by and hosted on G2.com.

As a SOC analyst, I like the SOAR’s threat-centric cases, alert graphs and quick search that facilitate context discovery around an alert rather than manual investigation. Gemini is surprisingly useful during an investigation as I can ask it questions in natural language to get a case summary and jump to the relevant activity without having to construct each query. The SOAR side is also appealing to me as playbooks and integrations allow for automation of repetitive response tasks so I can focus on the alerts that actually require my attention. Review collected by and hosted on G2.com.

The platform has a number of features going on, and it takes a while to get comfortable with YARA-L, investigation views and SOAR activities when you are new to the product. It would be interesting to see a more guided SOC analyst onboarding experience with some realistic investigation examples, as a first week guide would ease the learning curve. Review collected by and hosted on G2.com.

I really like is it automatically connects related security events across our environment which saves me probably 2-3 hours of manual investigation work each week, and I never expected the unified timeline view to be as useful; I can see what actually happened during an incident now my whole team relies heavily on it and the way it integrates with our existing security setup was way smoother than I expected hence getting started was a lot less stressful. Review collected by and hosted on G2.com.

While creating detection rules and tweaks is a learning curve that can take a bit longer to master around the customization, it would be nice if more onboarding templates existed to help analysts get up to speed who aren't new to the team. Review collected by and hosted on G2.com.

Google Security Operations stands out for its lightning-fast cloud-native speed and ability to analyze massive amounts of security data at scale. Review collected by and hosted on G2.com.

The main things I dislike are the complexity of the interface, the learning curve for new users, and the amount of configuration required to get the most out of the platform. Some workflows can also feel less intuitive than they should, especially when investigating large volumes of security data Review collected by and hosted on G2.com.

I like how Security Search allows you to pull in vast quantities of security data into one central location where you can easily search and analyze it. Being a data analyst, I particularly find the filtering and investigate features beneficial as I am able to quickly scan for patterns, anomalies, and correlated events without having to look through several different systems. Review collected by and hosted on G2.com.

It can be overwhelming at first, particularly when you’re digging through massive amounts of data and logs from different security tools. You have to know what you’re searching for and have the right rules setup. Otherwise it can return overwhelming results. Review collected by and hosted on G2.com.

The thing I like most about it is that I am able to review all security events from a single console. As part of my job I work with various systems and it can take time to identify where something is going wrong. With this tool I am able to search through logs and determine what is going on quickly. I also really like the anomaly detection aspect of it. During security investigations there are times we have to look back through user behavior or system events. This helps narrow down where we need to look. Review collected by and hosted on G2.com.

Setting this up was kind of difficult at first for me. Just takes time to learn the platform and configure it how you want. There are times when you can get flooded with alerts and you have to spend time filtering through them. Once you fine tune it though, it works great. Review collected by and hosted on G2.com.