{"totalCount":11,"payload":"\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-09-22\u0022\u003E\n    1 day ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2449\/replies\/5728\u0022\u003E\n                    Enable Custom Python Integration (IDE) Access in Google SecOps\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2449\/replies\/5728\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-09-21\u0022\u003E\n    2 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2446\/replies\/5722\u0022\u003E\n                    Unable to create manual case via SOAR API without setting data access scope for relevant environment\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2446\/replies\/5722\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-09-15\u0022\u003E\n    8 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2434\/replies\/5701\u0022\u003E\n                    Google SecOps Scheduled Report via Email\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2434\/replies\/5701\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-09-04\u0022\u003E\n    20 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2412\/replies\/5662\u0022\u003E\n                    Parser extension not creating additional.fields\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2412\/replies\/5662\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-09-02\u0022\u003E\n    21 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2409\/replies\/5643\u0022\u003E\n                    SilentPush Integration \u2013 Test Connection fails with \u0026quot;Connection failed: None\u0026quot; (no HTTP response)\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2409\/replies\/5643\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-08-25\u0022\u003E\n    29 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2345\/replies\/5614\u0022\u003E\n                    Google SecOps Parser Extension - How to reference extracted.fields[\u0026quot;_raw.log\u0026quot;] from base parser?\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2345\/replies\/5614\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-08-25\u0022\u003E\n    29 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2389\/replies\/5609\u0022\u003E\n                    Need help with YARA-L rule\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2389\/replies\/5609\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-08-25\u0022\u003E\n    29 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2391\/replies\/5608\u0022\u003E\n                    how to add 2 different conditions in rule\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2391\/replies\/5608\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-08-25\u0022\u003E\n    29 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2345\/replies\/5607\u0022\u003E\n                    Google SecOps Parser Extension - How to reference extracted.fields[\u0026quot;_raw.log\u0026quot;] from base parser?\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2345\/replies\/5607\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n    \n        \n        \n    \n\n    \n\n    \n\n    \u003Cdiv class=\u0022table__row qa-activities-row\u0022\u003E\n\n        \u003Cdiv class=\u0022table__cell\u0022\u003E\n            \u003Cdiv class=\u0022user flag flag--top\u0022\u003E\n                \u003Cdiv class=\u0022flag__image\u0022\u003E\n                    \u003Cdiv class=\u0022avatar avatar--L\u0022\u003E\n                        \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022qa-profilepicture\u0022\u003E\n                            \u003Cdiv class=\u0022profilepicture\u0022\u003E\n                                                                                                        \u003Cimg src=\u0022https:\/\/uploads-us-west-2.insided.com\/securitygooglecloud-en\/icon\/200x200\/913fc3a2-7338-435c-bee7-1541033ecb49.png\u0022 alt=\u0022matt-amastra\u0022\n                                         onerror=\u0022this.style.display=\u0027none\u0027;this.nextElementSibling.style.display=\u0027\u0027;\u0022\u003E\n                                    \u003Cdiv class=\u0022default-avatar avatar-variant-6\u0022 role=\u0022img\u0022 aria-label=\u0022matt-amastra\u0022 style=\u0022display:none\u0022\u003E\n                                        M\n                                    \u003C\/div\u003E\n                                                            \u003C\/div\u003E\n                                                    \u003C\/a\u003E\n                    \u003C\/div\u003E\n                \u003C\/div\u003E\n\n                \u003Cdiv class=\u0022user_data flag__body\u0022\u003E\n                    \u003Cdiv class=\u0022user_meta\u0022\u003E\n                                                                \u003Ca href=\u0022https:\/\/security.googlecloudcommunity.com\/members\/matt-amastra-428336\u0022 class=\u0022username link link--quiet qa-username\u0022 title=\u0022matt-amastra\u0022\u003E\n                    matt-amastra\n                \u003C\/a\u003E\n                \u003Cspan class=\u0022useraction\u0022\u003Ehas left a reply\u003C\/span\u003E\n            \n        \n                        \u003Cspan class=\u0022text--meta\u0022\u003E\n                            \n\n\n\u003Ctime class=\u0022  qa-latest-post-time\u0022 datetime=\u00222026-08-24\u0022\u003E\n    30 days ago\n\u003C\/time\u003E\n\n                        \u003C\/span\u003E\n                    \u003C\/div\u003E\n\n                                \u003Ch4\u003E\n                \u003Ca class=\u0022link--header thread-list-block__title\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2345\/replies\/5599\u0022\u003E\n                    Google SecOps Parser Extension - How to reference extracted.fields[\u0026quot;_raw.log\u0026quot;] from base parser?\n                \u003C\/a\u003E\n            \u003C\/h4\u003E\n             \u003Ca class=\u0022link link--underline\u0022 href=\u0022https:\/\/security.googlecloudcommunity.com\/questions\/2345\/replies\/5599\u0022\u003E\n                 View reply\n             \u003C\/a\u003E\n        \n                \u003C\/div\u003E\n            \u003C\/div\u003E\n        \u003C\/div\u003E\n\n    \u003C\/div\u003E\n\n\n"}