Versions Compared

Old Version 1

changes.mady.by.user Juan Tomás Alonso Nieto (Deactivated)

Saved on

compared with

New Version 2

changes.mady.by.user Former user

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
title GCP - Logging Sink Deletion

An attacker could be deleting a logging sink to avoid detection.

This alert filters Google Cloud Audit Logs to find the log entries that have the method name equal to google.logging.v2.ConfigServiceV2.DeleteSink.

Source table → cloud.gcp

Expand
titleGCP -SQL Database Modification

This alert detects when a Cloud SQL Database has been modified or deleted, and if any user has gained privileges on a database or any of its tables.

Source table → cloud.gcp