Behaviour signals
Keepnet + Google SecOps integration
Pull per-employee risk signals from your Google SecOps events.
Keepnet integrates with Google SecOps to pull per-employee risk signals from your Google SecOps events.
What you get
- Risk analytics and security events linked to employees
- Events read in time windows, not all at once
- Signals appear next to Keepnet’s own data
How it works
- Keepnet connects with a service account
- It runs UDM searches for risk analytics and security events
- Matches become behaviours with a severity
Data and permissions
| Data | Direction | Detail |
|---|---|---|
| UDM events | In | Read only (a service account with the Chronicle read scope) |
What you need
- Google SecOps
- A service account for Keepnet
Set up
Upload the service account key and pick the event types.
Related integrations
- Works with
- Secure Behaviour Dashboard, Agentic AI
- Built by
- Keepnet
- Last updated
- October 2026
