FeatureSep 6, 2026

Case playbooks

Google Security OperationsGCP · Security and Identity

Case playbooks

This feature is in preview. Google SecOps now supports case playbooks. You can run playbooks or execute manual actions across an entire case container rather than individual alerts, consolidating response tasks and reducing redundant operations during investigations.

For more information, see Case playbooks overview.

Read the original announcement

All Google Security Operations updates →

The deadline for the migration of SOAR APIs to the Chronicle API has been extended from November 30, 2026 until March 31, 2027.
For more information, refer to SOAR Migration overview
Google Security OperationsFeatureOct 12, 2026
[Spotlight Feature] Monitor response and playbook health with the Response Health Hub
Google SecOps now includes the Response Health Hub curated dashboard, a central location for monitoring playbook performance, execution latency, automation effectiveness, and integration health across environments.

Case playbooks

More from Google Security Operations

Case playbooks

More from Google Security Operations