[Spotlight Feature] Search for cases using SIEM Search

[Spotlight Feature] Search for cases using SIEM Search

Google SecOps SIEM Search now provides robust capabilities for analyzing cases and case history alongside existing Unified Data Model (UDM) events and entities. This update allows security analysts to seamlessly correlate case details with other security telemetry within a single interface, streamlining workflows and accelerating incident response.

Key Highlights:

• Unified Search Experience: Conduct searches across UDM events, entities, cases, and case history from a single SIEM Search interface. • Correlate SIEM and SOAR Data: Effortlessly link case details and historical activities with security data, reducing context switching and improving investigation efficiency.

For more information, see Search cases and case history.