- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
Detect when an attempt to export Cloud SQL instance data to cloud storage occurs.
This rule monitors Google Cloud Audit Logs to determine when an attempt to export Cloud SQL instance data to cloud storage has occurred. A malicious actor who has already gained initial access may try to exfiltrate data by exporting Cloud SQL data to external cloud storage outside of the compromised organization.
Notes:
Medium
severity when this activity originates from an anonymizing proxy.{{@network.client.ip}}
has taken other actions.