Google Chronicle Suite Reviews

We ingest security events and manage and respond to them. Our biggest challenges are trying to maintain the standardization of use cases and detection capabilities into the tool.

The most useful features of Google Chronicle Suite are the standard ones like the need to get the logs and their cloud capabilities to store them. Additionally, the ingestion capabilities of the tool are appreciated.

My primary use case of Chronicle is to solve vulnerabilities, detect threats, and investigate threats. It allows me to ingest and analyze large volumes of security data using logs and network information to identify potential threats. It helps in monitoring, conducting annual audits, and ensuring compliance.

The use of Chronicle provides my organization with a comprehensive solution for security data management, identification, and threat investigation.

I am an implementation architect, so I have admin access to Google Chronicle. Google Chronicle is a SIEM tool that collects and stores data from various sources, such as network logs, cloud logs, device logs, security logs, and audit logs. It offers four types of ingestion: forwarder, cloud, ingestion API, and direct ingestion.

Google Chronicle has improved our data ingestion and indexing capabilities. It can ingest and index data quickly and store petabytes or even gigabytes of data. It also provides one year of hot retention for our data. 

The tool helps us to generate various reports, including health reports, data logs, and alert dashboards. It is very scalable and fast. 

Additionally, its integration with other Google services like Mandient and VirusTotal provides advanced threat intelligence.

I find it has similar use cases, such as logging and monitoring, playbook creation, incident response, and integration with multiple technologies like threat intelligence. The same use cases apply to this product as well.

The main advantage I see is the cost, which is currently low. Additionally, the language used for content creation is very flexible and visually appealing. They also combine their source solution into one product, allowing for out-of-the-box playbook creation and incident response. 

Google Chronicle Suite has significantly improved our organization's cybersecurity efforts. While working on a Threat Intelligence Platform to automate security processes, we found that Chronicle's quick data analysis using BigQuery sets it apart. Unlike other tools, it allows us to fetch and analyze logs within seconds, making our SOC processes more efficient. This speed is crucial for automating tasks and predicting potential cyber threats. Chronicle's seamless integration with BigQuery has streamlined our development efforts and advanced our threat intelligence capabilities.

The best thing about Google Chronicle Suite, especially for someone like me who analyzes security incidents, is how fast it fetches results. When dealing with real-time cyber threats, you need information quickly to respond within minutes. Waiting for data for an hour is just not practical. Chronicle's speed in getting the information I need is its most valuable feature, helping us stay on top of things and respond swiftly to potential security issues. Additionally, what sets Chronicle apart from other solutions is its emphasis on threat hunting rather than solely serving as a monitoring tool. This unique feature enables us to proactively identify and investigate potential threats, making it a preferred choice for our organization. The ability to swiftly navigate and analyze extensive datasets without significant delays makes Chronicle a robust solution for enhancing our cybersecurity efforts.

We use the product for MDR requirements.

The platform's most valuable features are multiple connectors and data output flexibility regarding dashboards and user experience. We can seamlessly create graph dashboards and reports for the customers as per the contracts. The performance speed makes the operations easy. It connects the user accounts quickly, as in-built connectors are available for vendors in Palo Alto and Check Point.

The solution is implemented in our organization. Most employees use it. We use it for storage and security. We are using it for endpoint security.

The support team is responsive.