Stay organized with collections
Save and categorize content based on your preferences.
This page includes a selection of the reference topics for Google Security Operations SIEM and Google Security Operations SOAR. Use the table of contents to the left to see all of the Google Security Operations reference topics.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],[],[[["\u003cp\u003eThis page provides reference materials for Google Security Operations SIEM and SOAR.\u003c/p\u003e\n"],["\u003cp\u003eYou can utilize APIs for Detection Engine rules and to access security data.\u003c/p\u003e\n"],["\u003cp\u003eThe Unified Data Model (UDM) field list, and supported default parsers are available for reference.\u003c/p\u003e\n"],["\u003cp\u003eInformation on working with SOAR APIs and SDKs, as well as the Google Security Operations Marketplace is also provided.\u003c/p\u003e\n"]]],[],null,["# Google Security Operations Reference\n\nThis page includes a selection of the reference topics for Google Security Operations SIEM and Google Security Operations SOAR. Use the table of contents to the left to see all of the Google Security Operations reference topics. \n\n- [### Detection Engine API\n Create, run, and manage Detection Engine rules.](/chronicle/docs/reference/detection-engine-api)\n- [### Search API\n Access your security data programmatically.](/chronicle/docs/reference/search-api)\n- [### Unified Data Model field list\n List of fields in the Unified Data Model (UDM).](/chronicle/docs/reference/udm-field-list)\n- [### Supported default parsers\n Vendor and device logs with default parsers in Google Security Operations.](/chronicle/docs/ingestion/parser-list/supported-default-parsers)\n- [### SOAR APIs\n Working with the Google Security Operations SOAR APIs.](/chronicle/docs/soar/reference/working-with-chronicle-soar-apis)\n- [### SOAR SDK\n Working with the Google Security Operations SOAR SDK.](/chronicle/docs/soar/reference/case-manipulation)\n- [### Google SecOps Response Integrations\n Working with Google SecOps Response Integrations.](/chronicle/docs/soar/marketplace-integrations)"]]