Mandiant Frontline Threats rule packs added to Google SecOps
Google Security Operations release notes dated 2026-08-26 say Mandiant Frontline Threats rule packs for Linux, macOS and Google Cloud were added to Curated Detections and to the Content Hub (Google release notes, read 2026-11-03).
Curated Detections are Google's vendor-maintained rules, separate from the community rules in the chronicle/detection-rules repository. The release note names three platforms and gives no count of rules, so the size of the addition is not stated.
Source: docs.cloud.google.com read 2026-11-04
What it changes for a buyer
Teams with Linux, macOS or Google Cloud log sources have new curated content to enable. Replay it on your data first, since no rule count or tuning guidance is given.
Where this stands on the rubric
Current rubric standing of the platforms this note names.
| Platform | Total, of 10 | Matrix, of 33 | Rule health, of 5 |
|---|---|---|---|
| Google Security Operations | 6.83 | 15.0 | 3.5 |
All notes are in the changelog. Spotted something wrong? See corrections.