Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel2
maxLevel2
typeflat

...

Here you will find the steps to filter this type of event:

Action

Steps

1

Activate Security Command Center service

Info

When SCC is activated, the events will go directly through the Logging service to the default sink. The following steps are optional but recommended to filter SCC events on another Pub/Sub.

In order to receive this type of event, it is necessary to have the Security Command Center service activated.

Refer to the Security Command Center Quickstart video from the Google guide.

2

Setting up a new topic

Refer to the Configuration of the Loggingsection to know how to do it.

3

Setting up a Pub/Sub

Refer to the Configuration of the Loggingsection to know how to do it.

4

Setting up a sink

Refer to the Configuration of the Loggingsection to know how to do it.

...

Note

You have to use the scc_findigs service to pull this data source.

Action

Steps

1

Configure Identity and Access Management (IAM) roles.

Refer to the official Google guide in which additional configurations are described.

2

Activate the Security Command Center API.

3

Setting up a Pub/Sub topic.

4

Creating a Notification configuration.

...

Authentication method

Project ID

Base64 credentials

File credentials

Available on

1

Service account with Base64.

Status
colourGreen
titleRequired

Status
colourGreen
titleRequired

  • Collector Server

  • On-Premise

2

Service account with the file credentials.

Status
colourGreen
titleRequired

Status
colourGreen
titleRequired

  • On-Premise

...