<?xml version="1.0" encoding="UTF-8"?>
<!-- AUTOGENERATED FILE. DO NOT EDIT. -->
<feed xmlns="http://www.w3.org/2005/Atom">
  <id>tag:google.com,2016:chronicle-soar-release-notes</id>
  <title>Google SecOps SOAR - Release notes</title>
  <link rel="self" href="https://docs.cloud.google.com/feeds/chronicle-soar-release-notes.xml"/>
  <author>
    <name>Google Cloud Platform</name>
  </author>
  <updated>2026-04-11T00:00:00-07:00</updated>

  <entry>
    <title>April 11, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#April_11_2026</id>
    <updated>2026-04-11T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#April_11_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#April_05_2026">Release 6.3.82</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>April 05, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#April_05_2026</id>
    <updated>2026-04-05T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#April_05_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.82 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
<h3>Feature</h3>
<p><strong>Playbook Condition and Multi-Choice Question Flows</strong></p>
<p>The maximum number of branches supported in Playbook <strong>Conditions</strong> and <strong>Multiple Choice Questions</strong> has been increased from 6 to 20. This allows for more complex branching logic within a single step. </p>
<p>For more information, see <a href="https://docs.cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-flows-in-playbooks">Use flows in playbooks</a>.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>April 04, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#April_04_2026</id>
    <updated>2026-04-04T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#April_04_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_29_2026">Release 6.3.81</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 29, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_29_2026</id>
    <updated>2026-03-29T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_29_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.81 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 28, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_28_2026</id>
    <updated>2026-03-28T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_28_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_15_2026">Release 6.3.80</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 17, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_17_2026</id>
    <updated>2026-03-17T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_17_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>SOAR Permission Groups migration to Google Cloud IAM is now in General Availability (GA).
You can now leverage Google Cloud IAM for precise, granular feature access, moving away from legacy permission groups.</p>
<p>You can enable it by <a href="https://docs.cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/migrate-to-gcp#permissions-iam">migrating</a> the legacy SOAR permission groups and permissions to Google Cloud IAM through a self-service migration available from January 26, 2026. Please check the <a href="https://docs.cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/migrate-soar-permissions-iam">documentation</a> and <a href="https://youtu.be/UBfwcgDvc0s">video</a> for full instructions.</p>
<p>This update is available to all customers who have completed <a href="https://docs.cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/migrate-to-gcp#migration-stage-1-for-google-secops-unified-customers">Stage 1</a> of the SOAR migration to Google Cloud.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 16, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_16_2026</id>
    <updated>2026-03-16T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_16_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Stage 2 of the SOAR migration to Google Cloud deadline has been extended from June 30th to September 30th, 2026. </p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 15, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_15_2026</id>
    <updated>2026-03-15T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_15_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.80 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 14, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_14_2026</id>
    <updated>2026-03-14T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_14_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_08_2026">Release 6.3.79</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 08, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_08_2026</id>
    <updated>2026-03-08T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_08_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.79 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 07, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_07_2026</id>
    <updated>2026-03-07T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_07_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_01_2026">Release 6.3.78</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 01, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#March_01_2026</id>
    <updated>2026-03-01T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#March_01_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.78 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 28, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_28_2026</id>
    <updated>2026-02-28T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_28_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_22_2026">Release 6.3.77</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 22, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_22_2026</id>
    <updated>2026-02-22T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_22_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.77 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains the following changes:</p>
<h3>Change</h3>
<p><strong>Publisher Agent Version 2.6.4</strong> removes support for <strong>Python 3.7</strong> from the remote agent.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 21, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_21_2026</id>
    <updated>2026-02-21T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_21_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_15_2026">Release 6.3.76</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 15, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_15_2026</id>
    <updated>2026-02-15T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_15_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.76 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 14, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_14_2026</id>
    <updated>2026-02-14T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_14_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_08_2026">Release 6.3.75</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 08, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_08_2026</id>
    <updated>2026-02-08T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_08_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.75 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 07, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_07_2026</id>
    <updated>2026-02-07T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_07_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_01_2026">Release 6.3.74</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 01, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#February_01_2026</id>
    <updated>2026-02-01T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#February_01_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.74 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains the following changes:</p>
<h3>Change</h3>
<p>The <strong>Case Federation</strong> feature is no longer dependent on the <strong>Case Federation</strong> integration in the primary platform.</p>
<p>The primary platform sync job is now disabled. Do not attempt to re-enable it.</p>
<p>For more information, see <a href="https://docs.cloud.google.com/chronicle/docs/soar/admin-tasks/environments/case-federation">Set up case federation access for SOAR</a>.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 31, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_31_2026</id>
    <updated>2026-01-31T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_31_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_25_2026">Release 6.3.73</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 26, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_26_2026</id>
    <updated>2026-01-26T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_26_2026"/>
    <content type="html"><![CDATA[<h3>Feature</h3>
<p><strong>Timeline View for Alerts</strong></p>
<p>Visualize alert patterns over time using the new timeline view in the <strong>Alerts</strong> section of the <strong>Cases Overview</strong> tab.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 25, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_25_2026</id>
    <updated>2026-01-25T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_25_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.73 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains the following changes:</p>
<h3>Feature</h3>
<p><strong>Structured SOAR Python integration logs</strong></p>
<p>Python integration logging has been upgraded to a structured format to eliminate visibility gaps and ensure comprehensive diagnostic coverage in Google Cloud.<br/>
This upgrade changes how Python logs are interpreted in the GCP Cloud Logging Explorer. Previously, logs were bundled into a single block per execution. Now, every log line is interpreted as a separate entry, allowing for granular filtering, better searchability, and easier debugging of specific events.</p>
<p><strong>Recommended Actions:</strong></p>
<ul>
<li><strong>Update Log-Based Alerts:</strong> Ensure alerts triggered by string matches are compatible with individual log entries rather than bundled blocks.</li>
<li><strong>Review Automation Scripts:</strong> Test any external scripts or BigQuery exports that parse textPayload against the new granular format.</li>
<li><strong>Verify Dashboards:</strong> Custom monitoring dashboards may show an increase in event counts as executions are no longer bundled.</li>
</ul>
<p>For more information, see <a href="https://docs.cloud.google.com/chronicle/docs/soar/investigate/collecting-soar-logs">Collect SOAR logs</a>.</p>
<h3>Announcement</h3>
<p><strong>Integration Rollback</strong></p>
<p>This <a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_18_2026">Integration Rollback</a> feature is now in General Availability (GA).</p>
<p>Rollback is not supported for integrations built for Python 2.7 or 3.7. To perform a rollback, a snapshot must have been created during the previous upgrade process.
For more information, see <a href="https://docs.cloud.google.com/chronicle/docs/soar/respond/integrations-setup/version-rollback">Roll back response integration version</a>.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 24, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_24_2026</id>
    <updated>2026-01-24T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_24_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_18_2026">Release 6.3.72</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 18, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_18_2026</id>
    <updated>2026-01-18T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_18_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.72 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains the following changes:</p>
<h3>Feature</h3>
<p><strong>Integration Rollback</strong></p>
<p>This feature is currently in Preview.</p>
<p>You can now roll back commercial response integrations to their previously installed version. This action reverts all integration content, including standard code and any custom modifications, to the state of the last installed version. For more information, see <a href="https://docs.cloud.google.com/chronicle/docs/soar/respond/integrations-setup/version-rollback">Roll back response integration version</a>.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 17, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_17_2026</id>
    <updated>2026-01-17T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_17_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_11_2026">Release 6.3.71</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 11, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_11_2026</id>
    <updated>2026-01-11T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_11_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.71 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains the following changes:</p>
<h3>Feature</h3>
<p><strong>Custom Transformers and Logical Operators</strong></p>
<p>This feature is currently in Preview.</p>
<p>Playbook engineers can now extend platform capabilities by creating custom Python-based transformation functions and logical operators as part of Extension Packs directly within the IDE. For more information, see <a href="https://docs.cloud.google.com/chronicle/docs/soar/respond/custom-transformers-logical-operators">Custom transformation functions and logical operators</a>.</p>
<h3>Change</h3>
<p><strong>Increased iteration and step limits for Playbook Loops</strong></p>
<p>To support larger automation requirements, the maximum number of iterations for a single loop has been increased to 1,000, and the number of supported steps within a loop has been increased to 100.</p>
<h3>Change</h3>
<p><strong>Terminate Playbook capability</strong></p>
<p>You can now manually terminate a running playbook directly from the Playbook Viewer in the Case Overview. This provides a mechanism to immediately end execution if a loop encounters unwanted or excessive iterations.</p>
<h3>Announcement</h3>
<p><strong>Playbook Loops</strong></p>
<p>This feature is now in General Availability (GA).
For more information, see <a href="https://docs.cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/playbook-loops">Automate tasks with Playbook Loops</a>.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>January 10, 2026</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#January_10_2026</id>
    <updated>2026-01-10T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#January_10_2026"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#December_14_2025">Release 6.3.70</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>December 14, 2025</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#December_14_2025</id>
    <updated>2025-12-14T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#December_14_2025"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p>Release 6.3.70 is being rolled out to the first phase of regions as listed <a href="https://docs.cloud.google.com/chronicle/docs/soar/overview-and-introduction/soar-gradual-release">here</a>.</p>
<p>This release contains internal and customer bug fixes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>December 13, 2025</title>
    <id>tag:google.com,2016:chronicle-soar-release-notes#December_13_2025</id>
    <updated>2025-12-13T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#December_13_2025"/>
    <content type="html"><![CDATA[<h3>Announcement</h3>
<p><a href="https://docs.cloud.google.com/chronicle/docs/soar/release-notes#December_07_2025">Release 6.3.69</a> is now available for all regions.</p>
]]>
    </content>
  </entry>

</feed>
