November 1, 2026 · Google CloudFeature
Google SecOps Cases Playbooks tab shows case and alert playbooks together
Unified Case and Alert Playbooks view
The Playbooks tab in Cases now provides a consolidated view of all automated workflows associated with an investigation, displaying both case-level and alert-level playbooks in a single tab.
For more information, see View case and alert playbooks.
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.
More Google SecOps changes
Single Settings menu replaces separate SIEM and SOAR settings, with updated navigationPreview
Endpoint deprecated from November 2, 2026; use ListCaseEvidenceData insteadDeprecation
Adds Basic Mode, a default fast-path search mode that skips secondary enrichment stepsPreview
Operations feature in the Emerging Threats Center feed is generally availableGA