ASM Google SecOps SOAR Integration Docs

🚧

Special privileges required

This feature is only available to ASM administrators.

Integrating Google Security Operations (SecOps) SOAR with Attack Surface Management (ASM) helps you automate investigative processes and improve the accuracy and speed of your analysts. Google SecOps SOAR reduces the time it takes to investigate incidents by solving multiple use cases, such as:

  • Automatically fetching Issues
  • Using MA-ASM Entity details to collect additional insights about external assets

You can define what ASM data is ingested into Google SecOps SOAR in an effort to focus on the attributes that are most relevant to you. Some suggestions are as follows:

  • Limit to Entities with a minimum vulnerability count and minimum Issue count.
  • Define the minimum Issue Severity for Issues.
  • Specify an Entity by name.
  • Set a maximum on the number of Issues to return.

For more information, refer to the Google SecOps SOAR documentation portal.