November 5, 2026 · Google CloudFeature
Google SecOps adds custom tags for Case Wall activities, with tag filtering
[Spotlight Feature] Case activity tagging
You can now use custom tags for individual activities, comments, tasks, and actions on the Case Wall, and filter the wall view by those tags. This allows you to categorize specific observations and filter the timeline to view only the entries relevant to your investigation or team.
For more information, see Add a tag to a Case Wall activity.
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.
More Google SecOps changes
Single Settings menu replaces separate SIEM and SOAR settings, with updated navigationPreview
Endpoint deprecated from November 2, 2026; use ListCaseEvidenceData insteadDeprecation
Google SecOps Cases Playbooks tab shows case and alert playbooks together
Adds Basic Mode, a default fast-path search mode that skips secondary enrichment stepsPreview
Operations feature in the Emerging Threats Center feed is generally availableGA