Google Cloud Storage Bucket modified

gcp

Classification:

compliance

Tactic:

TA0005-defense-evasion

Technique:

T1578-modify-cloud-compute-infrastructure

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Goal

Detect when an administrative change to a GCS Bucket has been made. This could change the retention policy or bucket lock. For more information, see the GCS Bucket Lock docs.

Strategy

This rule lets you monitor GCS bucket admin activity audit logs to determine if a bucket has been updated with the following method:

  • storage.buckets.update

Triage and response

Review the bucket to ensure that it is properly configured.

PREVIEWING: aliciascott/DOCS-9725-Cloudcraft