Search data using the Nebula integration with Google Chronicle SIEM

In order to narrow down the detection data sent from Nebula, you can utilize the search parameters available in Google Chronicle SIEM. This allows you to precisely filter and access the required information.

To search for Nebula data in the Google Chronicle SIEM platform:

1. Go to Investigation > SIEM Search.
2. Enter the following string into the search field:

   metadata.vendor_name = "Malwarebytes" and metadata.log_type = "MALWAREBYTES_EDR"

3. Select the desired date parameter.
4. Click Run Search.
5. Click on the Events tab.
6. The data ingested from Nebula is displayed using a Unified Data Model in Google Chronicle SIEM.

Return to the Nebula integration with Google Chronicle SIEM section.