Stay organized with collections
Save and categorize content based on your preferences.
The type of the collection which will indicate which other fields are relevant. For example, detection finding collections will populate the detection field. Findings that evolve into investigations will populate the investigation field.
Enums
COLLECTION_TYPE_UNSPECIFIED
An unspecified collection type.
TELEMETRY_ALERT
An alert reported in customer telemetry.
GCTI_FINDING
A finding from the Uppercase team.
UPPERCASE_ALERT
RULE_DETECTION
A detection found by applying a rule.
MACHINE_INTELLIGENCE_ALERT
An alert generated by Chronicle machine learning models.
SOAR_ALERT
An alert coming from other SIEMs via Chronicle SOAR.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-01-22 UTC."],[],[]]