# Google SecOps use cases

<br />

<br />

<br />

Filter documentation by your use case.
Security Administrator Security Developer Security Engineer Security Manager SOC Analyst
- **[Configure customized schedules for rules](https://docs.cloud.google.com/chronicle/docs/detection/set-customized-schedule)** Set customized schedules for rules and detections <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Engineer
- **[Understand rule run scheduling](https://docs.cloud.google.com/chronicle/docs/detection/rule-execution-frequency)** Understand automated and customized rule run scheduling <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Engineer
- **[Query ingestion metrics](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-ingestion-metrics)** Monitor threat landscapes and system health using curated dashboards for ingestion metrics queries <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[Query SOAR cases](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-soar-cases)** Query SOAR cases dashboards <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[Run UDM queries](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-udm-)** Monitor threat landscapes and system health using curated dashboards for the UDM source type <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[Query entities](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-entities)** Monitor threat landscapes and system health using curated dashboards for entities <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[Query rules and detections](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-rules-detections)** Query rules and detections dashboards <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[View IoC matches](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-ioc-matches)** Track and analyze Indicator of Compromise (IoC) matches <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[View SOAR case history](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-soar-case-history)** Review historical data and trends for SOAR cases <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[View SOAR playbooks](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-soar-playbooks)** Analyze the usage and effectiveness of SOAR playbooks <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[View UDM and datatable queries](https://docs.cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-udm-datatable)** Explore detailed UDM event data <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[Configure calculated fields for SOAR cases](https://docs.cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/calculated-fields)** Enhance SOAR case data with custom calculated fields <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Manager
- **[Manage and configure dashboards](https://docs.cloud.google.com/chronicle/docs/reports/manage-native-dashboards)** Create, edit, and manage native dashboards in Google SecOps <br />

  <br />

  SOC Analyst

  <br />

  <br />

  Security Administrator
- **[Visualize data flows with Sankey charts](https://docs.cloud.google.com/chronicle/docs/reports/manage-native-dashboard-charts-sankey)** Visualize flows, relationships, and data pathways with Sankey charts <br />

  <br />

  Security Engineer

  <br />

  <br />

  SOC Analyst
- **[Respond to alerts and cases](https://docs.cloud.google.com/chronicle/docs/secops/respond-cases)** Handle alerts and respond to security cases <br />

  <br />

  SOC Analyst
- **[Explore legacy SOAR reports](https://docs.cloud.google.com/chronicle/docs/soar/monitor-and-report/soar-reports/understanding-reports)** Learn how to interpret and use SOAR reports <br />

  <br />

  SOC Analyst
- **[Investigate alerts and entity context](https://docs.cloud.google.com/chronicle/docs/investigation/Investigate-alert-entity-context)** Investigate alerts by exploring related entity context and timelines <br />

  <br />

  SOC Analyst
- **[Investigate detections in search](https://docs.cloud.google.com/chronicle/docs/investigation/investigate-detections-in-search)** Use the search interface to find and investigate detections <br />

  <br />

  SOC Analyst
- **[Enable SOAR access](https://docs.cloud.google.com/chronicle/docs/secops/enable-soar-access)** Configure and manage user access to SOAR features <br />

  <br />

  Security Administrator
- **[Configure alert overflow](https://docs.cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/define-alert-overflow-admin)** Configure SOAR alert overflow mechanisms <br />

  <br />

  Security Administrator
- **[Configure third-party identity](https://docs.cloud.google.com/chronicle/docs/onboard/configure-authentication)** Set up and configure authentication with third-party IdPs <br />

  <br />

  Security Administrator
- **[Analyze feed activity with Cloud Logging](https://docs.cloud.google.com/chronicle/docs/ingestion/analyze-feed-activity-with-cloud-logging)** Monitor, debug, and troubleshoot ingestion pipelines and feeds with Cloud Logging <br />

  <br />

  Security Administrator

  <br />

  <br />

  Security Engineer
- **[Understand rule run scheduling](https://docs.cloud.google.com/chronicle/docs/detection/rule-execution-frequency)** Learn about factors affecting rule execution frequency and latency <br />

  <br />

  Security Developer

  <br />

  <br />

  Security Engineer
- **[Monitor ingestion data](https://docs.cloud.google.com/chronicle/docs/ingestion/ingestion-overview)** Learn about data ingestion methods and best practices <br />

  <br />

  Security Engineer
- **[Monitor rule performance](https://docs.cloud.google.com/chronicle/docs/detection/rule-effectiveness)** Track and improve the effectiveness of detection rules <br />

  <br />

  Security Engineer
- **[Detect threats with unified rules](https://docs.cloud.google.com/chronicle/docs/detection/unified-rules/get-started)** Learn to create and manage unified detection rules <br />

  <br />

  Security Engineer
- **[Ingest and parse log data](https://docs.cloud.google.com/chronicle/docs/ingestion/log-ingestion-and-parsing)** Learn how logs are ingested and parsed <br />

  <br />

  Security Engineer
- **[Apply YARA-L 2.0 windowing logic](https://docs.cloud.google.com/chronicle/docs/yara-l/windowing-logic)** Understand windowing logic and time-based correlations in YARA-L rules <br />

  <br />

  Security Engineer
- **[Monitor health of data sources](https://docs.cloud.google.com/chronicle/docs/reports/data-health-monitoring-and-troubleshooting-dashboard)** Monitor data ingestion health and troubleshoot issues <br />

  <br />

  Security Engineer
- **[Monitor response and playbook health](https://docs.cloud.google.com/chronicle/docs/reports/response-health-monitoring-and-troubleshooting-dashboard)** Monitor playbook performance, automation efficiency, and integration health <br />

  <br />

  Security Engineer

  <br />

  <br />

  SOC Analyst
- **[Manage preview features](https://docs.cloud.google.com/chronicle/docs/secops/preview-features-manage)** Enable and manage access to Google SecOps preview features <br />

  <br />

  Security Manager