Google’s Chronicle Security Operations: Why Doesn’t My SIEM Do That?

SANS conducted a review of Chronicle, Google’s cloud-native security operations suite, with a focus on evaluating its SIEM features and usability from a practitioner perspective. As readers will learn from this review, the product has a significant number of capabilities and was obviously designed to address shortcomings inherent in many SIEM platforms. The interface was easy to navigate and makes operating through traditional analyst workflows seamless.