What is the role of Mandiant Threat Defense in Google SecOps?

Mandiant Threat Defense is a managed service option where Mandiant's own experts act as an extension of a customer's security team directly within their Google SecOps environment — continuously updating detections, proactively threat hunting, and providing rapid response support rather than the customer relying solely on their own in-house analysts.

Mandiant experts author and deploy proprietary rule packs specifically targeting newly identified threat actor activity or tactics observed during real-world incident response engagements, translating frontline intelligence — insights gathered from actually responding to breaches at other organizations — into deployable detection logic that benefits every customer using the service, often faster than an individual in-house team could develop equivalent coverage independently.

This service is positioned specifically for organizations that want expert-level threat hunting and rapid incident response capability without needing to build and staff that expertise entirely in-house, complementing (rather than replacing) a customer's own security team and their use of curated detections and the core SIEM/SOAR platform.