Chronicle (GCP) Detection Rules
A collection of example YARA-L detection rules and dashboards for Google Security Operations (SecOps).
What is Chronicle (GCP) Detection Rules?
Google Security Operations Detection Rules is an open-source repository of example YARA-L rules and dashboard templates for Google Security Operations (SecOps). It provides security teams with community-contributed detection logic and visualization tools to identify threats, monitor security events, and customize their security operations workflows within the Google Cloud ecosystem.
Security analysts, threat hunters, and DevOps engineers using Google Security Operations who need to implement custom detection rules, build dashboards, or automate security monitoring pipelines.
It offers practical, ready-to-use examples that complement Google's proprietary detections, enabling teams to accelerate their SecOps deployments, learn YARA-L best practices, and adopt a Detection-as-Code approach through included tooling and community contributions.
Overview
Collection of example YARA-L rules for use within Google Security Operations
Use Cases
Best For
- Implementing custom threat detection rules in Google SecOps
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
