{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"A Python SDK for interacting with Google Security Operations (Chronicle/SecOps) SIEM, wrapping the API to support UDM searches, entity lookups, IoCs, alert management, case management, and detection rule management.","skillfed_tags":["siem-integration","google-cloud","threat-hunting"],"use_cases":["Automate UDM event searches and threat hunting workflows within Chronicle without writing raw API calls.","Build security orchestration scripts that query entities, manage alerts, and update cases programmatically.","Integrate Chronicle SIEM data into custom dashboards or incident response automation platforms.","Manage detection rules and IoC indicators at scale via Python scripts or scheduled jobs.","Develop CLI tools or terminal-based security operations workflows using the built-in command interface."],"what_it_does":"The secops package is a Python wrapper around the Google Security Operations (Chronicle) API, designed to simplify interaction with Google's SIEM platform. It abstracts away low-level API details and provides a client-based interface for common security operations workflows: searching Unified Data Model (UDM) events, looking up entities, managing indicators of compromise, handling alerts, managing cases, and administering detection rules. The SDK supports multiple authentication methods\u2014Application Default Credentials for local development and cloud environments, explicit service account files, and service account impersonation\u2014making it flexible for different deployment scenarios.\n\nThe package depends on google-api-python-client, google-auth-httplib2, and google-auth to handle API communication and credential management. It includes built-in retry logic for transient failures and a command-line interface for terminal-based operations. The SDK is actively maintained, supports Python 3.10 through 3.13, and carries an Apache-2.0 license. Setup requires a pre-configured Google Cloud project linked to your SecOps instance and appropriate IAM roles; without this infrastructure, authentication will fail regardless of SDK installation.","worth_installing":"Yes, if you are already using Google Security Operations (Chronicle) and need programmatic access from Python. The low install friction, active maintenance, permissive license, and comprehensive authentication options make it a practical choice for integrating Chronicle into automation and orchestration workflows. The alpha status and requirement for pre-configured Google Cloud infrastructure are not blockers for teams already committed to the Chronicle platform."},"id":"secops","links":{"html":"https://skillfed.io/packages/secops","md":"https://skillfed.io/packages/secops.md","pypi":"https://pypi.org/project/secops/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-22","license_spdx":"Apache-2.0","license_treatment":"permissive","name":"secops","python_support":"supports_current","summary":"Python SDK for wrapping the Google SecOps API for common use cases"},"popularity":{"monthly_downloads":278981,"position":8127,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.44.1"}