Google Compute Engine network created
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Goal
Detect when a Google Compute Engine network is created.
Strategy
This rule lets you monitor Google Compute Engine activity audit logs to determine when the following method is invoked to create a new Compute Engine network:
beta.compute.networks.insert
v*.compute.networks.insert
An attacker could create a compute network with the intention of enabling cryptomining and bypassing networking limitations.
Triage and response
Review the Compute Engine network.
Changelog
- 17 August 2023 - Updated query to replace attribute
@threat_intel.results.subcategory:tor
with @threat_intel.results.category:tor
.