What is Chronicle?
Chronicle is a cloud-native security analytics platform from Google that functions as a modern SIEM. It analyzes security data at petabyte scale with sub-second search times and uses Google’s threat intelligence for threat detection.
Core Features
- Unlimited data retention at no additional cost
- Sub-second search across petabytes of historical data
- Over 700 pre-built log parsers for various sources
- Integrated Google Threat Intelligence and VirusTotal
- YARA-L rule language for custom detections
Typical Use Cases
Security Operations Center: Centralized analysis of all security events with automated threat detection and incident prioritization.
Threat Hunting: Proactive search for indicators of compromise over long time periods thanks to unlimited retention.
Incident Response: Fast forensic analysis through sub-second queries and correlated timeline views.
Benefits
- No scaling limits on data volume
- Reduced mean-time-to-detect through ML-based detection
- Cost transparency without hidden retention costs
- Seamless integration with Google Workspace and Cloud
Integration with innFactory
As a Google Cloud partner, innFactory supports you with Chronicle: architecture, migration, operations, and cost optimization.
Available Tiers & Options
Standard
- Petabyte scale
- Google threat intelligence
- Unlimited retention
- Requires onboarding
Typical Use Cases
Technical Specifications
Frequently Asked Questions
What is Chronicle?
Chronicle is a cloud-native SIEM platform from Google that analyzes security data at petabyte scale and detects threats using machine learning.
How does Chronicle differ from other SIEM solutions?
Chronicle is built on Google's infrastructure and offers unlimited data retention, sub-second search across petabytes, and integrated threat intelligence.
Which data sources are supported?
Chronicle supports over 700 pre-built parsers for firewalls, endpoints, cloud services, identity providers, and other security products.
Is Chronicle GDPR compliant?
Yes, Chronicle is available in EU regions and meets GDPR, SOC 2, and other compliance requirements.
