ProtectWise

Integration version: 4.0

Important: ProtectWise was acquired by Verizon and became part of the Network Detection and Response service.

Configure ProtectWise integration in Google Security Operations

For detailed instructions on how to configure an integration inGoogle SecOps, seeConfigureintegrations.

Actions

Get Events

Description

Get all events of an entity within a given time frame.

Parameters

ParameterTypeDefault ValueDescription
Timeframe (hours)StringN/AFetch events in time frame of hours. Example: 1

Use cases

N/A

Run On

This action runs on the IP Address entity.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result NameValue OptionsExample
successTrue/Falsesuccess:False
JSON Result
N/A

Get Pcap

Description

Download an event's packet capture.

Parameters

N/A

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result NameValue OptionsExample
successTrue/Falsesuccess:False
JSON Result
N/A

Ping

Description

Test Connectivity.

Parameters

N/A

Use cases

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result NameValue OptionsExample
successTrue/Falsesuccess:False
JSON Result
N/A

Need more help?Get answers from Community members and Google SecOps professionals.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.