Skip to content

Add third-party block: GCP Enrichment#784

Open
salvatoreasammito wants to merge 2 commits into
chronicle:mainfrom
salvatoreasammito:playbook/gcp_enrichment
Open

Add third-party block: GCP Enrichment#784
salvatoreasammito wants to merge 2 commits into
chronicle:mainfrom
salvatoreasammito:playbook/gcp_enrichment

Conversation

@salvatoreasammito
Copy link
Copy Markdown
Contributor

Summary

Adds a new third-party block for GCP Enrichment.

Description

This block enriches entities using Google Cloud Platform (GCP) integrations to add context to a case. Any missing or unconfigured integrations are skipped without causing the block to fail. AssetInventory: Enriches resources using a user-defined resource name input.Compute: Enriches IP address entities with instance information. IAM: Enriches user entities with service accounts information.

Type of Contribution

  • Block

Validation

  • mp validate passed

Notes

  • No sensitive or internal data included.
  • Block tested in SOAR environment before submission.

@salvatoreasammito salvatoreasammito requested a review from a team as a code owner May 11, 2026 17:59
@gemini-code-assist
Copy link
Copy Markdown
Contributor

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants