Bye-Bye DIY: Frictionless Security Operations with Google
summary
Google demonstrates a move away from DIY SecOps by shipping curated detections from Mandiant and VirusTotal visibility, matching 12 months of telemetry to Google Threat Intelligence, and claiming 56% unnoticed breaches in incident response data and about 90% common detections customers don’t need to author. The platform uses Gemini AI to generate and simulate playbooks, surface context and code analysis (a WannaCry verdict completes in 34 seconds to analyze WannaCry), and offers federated CyberShield deployments and turnkey detection-to-response outcomes.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 1:22Why DIY fails in SecOps
- 3:54Security data lake dilemma
- 6:01Detection engineering without grind
- 8:29Detection pitfalls
- 9:55AI-powered detection engineering
- 11:25Threat intelligence challenge
- 12:48Google Threat Intelligence deep dive
- 16:18Applying threat intel at scale
- 18:28Automating breach detection
- 21:20Investigation gaps in SOC
- 23:26AI-driven investigative assistance
- 24:30Code analysis with AI
- 25:11SOAR playbooks
- 27:19Threat hunting made easy
- 29:06Cloud security and SecOps convergence
- 31:11Federated SOCs for defense
- 32:35Real-world threat response example
- 34:19Next in AI-driven security
- 37:53Future of frictionless SecOps
- 38:14Resources and next steps
related talks
02mSecurity Operations & Threat Intelligence
04mElevate security with Gemini AI
03mcybersecurity solutions
18mAI and Cybersecurity
44mDevSecOps: Balancing Agility, Security & Stability in a Continuous Software Business
37mOptimizing Cloud Detection & Response With Security Chaos Engineering
09msecurity solutions
39mHacking Google - Lessons learned running and growing an internal red team