Google SecOps adds Mandiant Frontline rule packs for Linux, macOS and Google Cloud
Dated . Source: Google SecOps release notes, read
08-26month and day
What happened
Google Security Operations release notes dated 2026-08-26 say Mandiant Frontline Threats rule packs for Linux, macOS and Google Cloud were added to Curated Detections and Content Hub (release notes read 2026-11-03).
Google's SIEM and SOAR share one product, and the Response Agent is configured under SIEM settings. More curated detections in the same product mean more alerts that can start a response playbook without a second tool.
What it changes for a buyer
It strengthens the detection side of Google's coupling score. It does not add a containment action, change an approval mode or give a time-to-contain figure, so Google's response scores are unchanged.
All notes are on the updates page. The scores on this site change only when a vendor-controlled page changes; see the corrections log.